Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: c2xxzVQtDlGKO/Buao/6N4zzk+qISBOld3A65xg26kA=
Subject key identifier: F6:3D:4F:D9:F0:68:DE:FD:84:15:4F:D5:15:A3:C5:1E:D0:49:72:7E
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0196CBA9ABB40119A9C8ED17A7B208105452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 12FC
Signing time: Tue 13 May 2025 22:00:16 +0000
Manifest this update: Tue 13 May 2025 22:00:16 +0000
Manifest next update: Wed 14 May 2025 22:00:16 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 64jCXprbnybOYQ3kDYO2jYJmKr0okuhllIx7Y74s9F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:ab:b4:01:19:a9:c8:ed:17:a7:b2:08:10:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: May 13 22:00:16 2025 GMT
Not After : May 14 22:00:16 2025 GMT
Subject: CN=f63d4fd9f068defd84154fd515a3c51ed049727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3f:80:f0:07:06:04:f9:5b:1d:05:e0:b9:a3:
01:5e:e7:da:58:03:67:0c:f4:af:1d:26:2e:45:af:
10:b6:19:fd:4c:11:a4:a7:02:13:3c:8d:c4:b1:5f:
08:b5:6e:3e:f8:f9:9b:de:da:bf:bf:d0:d5:30:c9:
46:9b:c2:15:b6:49:a9:80:b0:5b:d2:24:20:43:36:
88:7c:df:9a:96:b1:35:85:db:40:0a:a7:d2:76:7c:
9b:ac:63:16:10:79:45:de:4f:a0:e9:0d:b1:be:0d:
d3:e1:41:71:16:e6:dd:62:b4:0c:4c:42:dc:db:43:
2f:55:c6:47:0c:56:e1:75:00:36:d5:6c:41:37:b3:
4a:49:a8:44:c5:e1:47:c5:29:75:c5:da:f2:2e:3f:
22:5e:76:bc:39:d1:1f:23:b6:e8:9a:be:ad:4c:d7:
87:43:e0:07:e0:64:c5:4d:46:e3:06:d3:a5:82:2a:
ca:a0:96:28:c8:32:20:a6:bf:8f:3d:a9:5a:9e:24:
96:d2:96:f4:ec:2f:89:dd:d2:7a:df:79:06:75:a8:
6f:e5:ea:d1:6b:bc:28:49:1f:65:e3:77:e8:48:3d:
30:f1:c3:de:bf:17:9f:d6:d3:38:bb:2d:82:2f:17:
40:5d:20:a9:77:94:82:20:8d:05:cd:cf:23:40:ed:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:4F:D9:F0:68:DE:FD:84:15:4F:D5:15:A3:C5:1E:D0:49:72:7E
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:39:0f:a6:d2:4d:2d:22:3d:22:f7:bf:10:07:ca:23:50:5f:
c4:58:eb:ff:f8:fe:08:bc:a5:66:c9:42:6d:a0:69:67:a5:a2:
39:67:95:80:65:aa:fe:35:34:89:30:55:7f:47:c6:60:a0:41:
aa:00:e9:98:95:21:af:b3:59:9a:42:24:c5:d3:df:4e:d9:61:
d0:23:19:f0:49:e3:4a:75:5f:d9:54:40:20:20:7b:a2:cf:8f:
44:48:89:8c:d9:bf:e7:db:99:ec:84:2f:38:84:e3:15:51:0f:
fc:e6:09:c6:06:79:29:e4:11:1f:6e:05:0a:39:75:67:94:ed:
c0:d0:02:2c:54:27:45:91:dd:94:97:0f:3e:b8:a4:06:31:91:
ba:fe:1e:d2:64:e5:95:91:24:8f:76:6e:fd:f2:26:b3:6d:cb:
e2:e0:92:a5:6d:2d:3c:6e:a7:52:28:0d:37:13:4d:a2:14:ab:
73:0c:57:1f:fc:32:77:6c:7e:85:7a:99:3a:e5:6a:37:04:2c:
34:0d:f1:e8:76:3a:51:d0:f7:72:7b:49:42:e5:36:b4:a9:5c:
c6:95:a2:ba:93:ff:74:48:9d:17:38:02:0c:8a:33:95:70:af:
3a:05:8a:cb:bc:36:49:b7:5b:a8:7c:14:b7:86:32:a0:6e:fb:
d7:6a:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:15:03 2025 by rpki-client