Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: fktJMSnJfGH+P9yVeUEZizxdTuYKfDvmBo5qsPuT8GQ=
Subject key identifier: 74:84:85:04:F4:37:01:04:5B:86:B8:9E:41:1D:DD:A1:2C:9C:73:6E
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 0197B6A18812B091EB04823B01A0196AAE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 019A
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: AOXuA0pgr5yYhmHOFHs1Y7cqtWAqdKrvSPvRD/yrx4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:88:12:b0:91:eb:04:82:3b:01:a0:19:6a:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=74848504f43701045b86b89e411ddda12c9c736e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:c7:fa:28:e4:a6:c1:eb:a1:c0:a8:ba:91:
67:26:87:5e:c0:23:54:08:d1:e7:6d:ca:c2:cd:47:
46:c0:93:b8:b4:1c:55:48:da:49:93:3e:90:2f:a6:
bd:4b:f6:2d:65:57:f8:0b:5c:74:bb:78:fc:83:98:
4c:91:27:61:62:fe:68:84:ef:ec:33:c1:30:0a:5c:
75:7c:7a:59:80:5f:7c:ab:13:6c:3a:a5:1b:96:40:
67:e2:73:34:15:8e:f1:eb:db:7e:51:e0:53:99:65:
01:9c:d9:94:7a:e5:0a:7e:be:78:74:05:67:76:81:
36:fc:56:f9:7e:95:41:b2:9e:00:31:b6:67:3f:59:
ca:89:74:21:22:c0:e9:62:48:4e:17:da:6b:2b:59:
61:ab:ec:08:69:c8:6e:3f:59:be:ef:37:bf:10:ef:
c2:83:ff:82:4e:bc:58:a2:01:4c:fb:08:67:1e:ee:
3f:f5:31:65:ae:17:8e:2c:ee:3a:8b:5b:34:5e:c3:
2e:8e:b5:93:a0:47:e7:d8:c8:78:6e:c9:c0:aa:1a:
7f:fd:56:44:b6:4a:4e:78:8f:f5:b2:48:f9:4f:fc:
68:b4:03:f4:e9:36:ce:63:ea:22:af:bd:5e:f6:a5:
7b:12:b6:ae:63:ee:1f:f7:9c:87:d2:a6:d3:2c:12:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:84:85:04:F4:37:01:04:5B:86:B8:9E:41:1D:DD:A1:2C:9C:73:6E
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d2:18:73:fe:68:d6:87:f4:7e:e7:d9:20:d7:a3:e8:7b:40:
11:83:a3:29:b8:c8:65:ba:df:e5:3f:a6:ef:29:d9:9d:2a:f2:
5a:de:01:17:a9:7d:94:70:39:57:f5:7c:c6:69:0c:e7:46:25:
a7:bb:c7:7d:76:ef:0c:c3:2f:64:b0:97:51:70:49:d4:6c:78:
b3:16:1f:37:36:1e:bb:b8:97:97:a0:71:af:0e:8a:62:7c:55:
1c:17:45:6c:86:c1:67:1e:9f:a2:0e:bb:b9:31:2f:48:6b:1e:
5c:65:f2:2b:a4:8e:a3:65:2f:f8:31:6e:1f:c3:24:da:a8:84:
d0:47:a4:46:99:32:9a:04:dd:ab:7c:2a:35:71:92:b1:76:f7:
05:e8:f4:62:f1:44:4f:fe:b0:9b:0f:02:5d:8f:e5:dc:d8:59:
22:a9:22:dc:db:a7:f8:6e:94:04:a3:4e:6b:24:81:ab:db:8b:
d2:80:3e:76:1a:93:e7:09:60:06:d0:fc:d6:7e:62:3a:26:c3:
9c:7b:25:64:15:85:f2:e1:4d:0d:ff:be:29:e0:28:9d:f3:e4:
c1:ec:c7:7f:6c:ff:e7:e2:e5:9a:58:f9:ac:c9:99:8b:7d:d8:
6d:4a:01:cd:2d:21:f9:29:85:c8:96:91:c4:ed:63:bf:22:6b:
fa:67:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:25 2025 by rpki-client