Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: W9e/V0eUrFJ360zuNYypZnMYBQETU7ykbVaC8ShqAHo=
Subject key identifier: 58:10:C5:84:DD:97:C6:8B:2E:DD:61:69:4B:84:52:56:03:A1:B2:2B
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0197CC83589383DFAFBB24EE67B2BF243EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1381
Signing time: Wed 02 Jul 2025 19:00:49 +0000
Manifest this update: Wed 02 Jul 2025 19:00:49 +0000
Manifest next update: Thu 03 Jul 2025 19:00:49 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: +n/s3K2FoY3NC0RQOJ5qa5k0LVst5k1XrblJYa7cnn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:58:93:83:df:af:bb:24:ee:67:b2:bf:24:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jul 2 19:00:49 2025 GMT
Not After : Jul 3 19:00:49 2025 GMT
Subject: CN=5810c584dd97c68b2edd61694b84525603a1b22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:28:d2:e3:36:65:5d:de:4e:9d:ed:99:5b:
67:87:36:ec:ea:d1:92:4f:ba:79:fa:27:23:b9:e7:
21:e1:4e:7e:e8:6f:e2:bf:a8:06:e8:de:02:07:00:
05:f7:8b:eb:e6:c1:cd:de:b2:a9:6d:e1:c0:cb:84:
ba:68:fc:dc:f0:f9:4c:ac:be:d5:d5:3b:7b:1e:c0:
71:3b:d3:15:be:8b:7b:f3:76:60:51:c4:ed:15:f8:
05:ec:17:26:f1:44:3b:ff:72:3b:53:2f:74:7e:65:
dd:71:f4:87:49:c1:7e:18:ed:6a:b2:07:62:de:57:
ce:b0:a7:12:6c:0d:60:28:e1:1b:57:2f:ac:0f:e0:
bc:82:fb:2c:e3:1b:df:5b:93:f5:1a:34:57:7c:fb:
ca:61:20:1c:84:99:01:a1:03:3a:64:7f:fe:df:e8:
17:cf:15:0f:05:90:f1:66:06:16:27:b7:f6:30:b1:
21:8e:b6:fc:53:70:ef:d7:60:d1:49:cd:0c:15:19:
0e:c8:39:0a:f0:5d:8e:e8:3e:d1:9d:9c:02:dd:b5:
82:34:cb:da:fd:67:8d:24:4d:9b:b4:c7:df:69:10:
40:90:89:e9:70:7e:8d:ef:35:cc:47:06:bb:6b:c4:
dd:df:e1:27:64:9f:ea:bb:10:3c:23:fc:90:70:e8:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:C5:84:DD:97:C6:8B:2E:DD:61:69:4B:84:52:56:03:A1:B2:2B
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:0d:13:41:68:bb:81:78:d7:27:35:5f:83:7a:9b:db:05:
56:80:23:98:d5:38:96:47:15:51:95:70:04:59:cc:14:75:18:
a2:5c:e4:e0:1f:0b:38:40:3d:61:f1:83:42:2f:77:3f:76:de:
72:1a:96:7b:0e:80:72:be:5f:00:e7:17:4a:fb:ba:9a:89:8a:
88:b1:84:b6:de:2b:fb:58:f8:d9:f0:1b:5a:05:3f:13:ef:79:
3e:f7:0d:1a:30:fb:b9:42:95:94:61:f7:6d:54:75:be:c0:0d:
38:71:c1:5b:f0:77:34:b0:5a:5e:f7:be:51:d3:db:00:8a:6b:
52:e2:ee:c9:a0:a8:24:f9:4b:56:90:26:65:b3:20:e6:be:9d:
eb:4e:76:96:fd:2b:65:fa:c7:c7:3b:a0:99:f1:9c:76:ba:c4:
85:e2:8c:b1:a5:5f:75:6f:c0:b1:1e:8e:2c:dd:21:0b:b1:e1:
17:52:bd:ae:59:96:97:66:b6:42:98:8f:65:69:e9:fb:3a:74:
3e:1a:61:70:fe:6d:5b:17:7c:82:a1:13:c3:56:73:b9:de:fe:
32:53:4c:54:90:48:66:8a:e6:28:65:46:c0:f9:c7:87:7b:69:
5f:81:4b:fb:35:ca:27:22:5a:e5:df:1d:85:b0:ee:2e:e3:9f:
ae:b0:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:18:50 2025 by rpki-client