Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: Ul/pHMht7CA6I02bM1lYoR+o10vwAFWup78ugZ3FPCU=
Subject key identifier: 48:00:45:B5:4A:7F:98:84:12:25:E7:8B:DD:E3:9F:55:92:BB:12:0B
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0197C12420824772F62F924E0C2424B8191E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 07A3
Signing time: Mon 30 Jun 2025 14:00:59 +0000
Manifest this update: Mon 30 Jun 2025 14:00:59 +0000
Manifest next update: Tue 01 Jul 2025 14:00:59 +0000
Files and hashes: 1: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: PeQn0mUyPsoG0hduqKaezJ3zFVkIC8M0ZQRb5rnPj4Q=)
2: x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa (hash: nkg8d2JuPVPfqk0kcc5OXRrb5PIvthJQYUpxPMl5/LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:20:82:47:72:f6:2f:92:4e:0c:24:24:b8:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Jun 30 14:00:59 2025 GMT
Not After : Jul 1 14:00:59 2025 GMT
Subject: CN=480045b54a7f98841225e78bdde39f5592bb120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:0e:1c:87:f4:51:d4:9d:5d:08:fc:c7:85:
32:ef:16:0a:a5:43:41:c7:b0:cf:eb:90:04:82:9d:
e5:8a:62:d2:07:5a:e8:0b:59:94:8c:e0:de:bb:bf:
0b:11:be:0f:bc:e3:f6:fa:70:3b:61:76:b0:70:57:
29:2e:d0:a2:0c:01:8f:4e:6d:9d:74:3b:87:99:2c:
be:49:dd:98:b3:dc:76:2c:b8:79:71:00:a9:2f:9b:
10:0d:4e:41:fb:06:79:79:c9:c8:ac:1f:d6:29:2d:
08:1b:ae:0a:48:a0:9b:d4:d1:53:af:ca:8b:0f:b6:
2f:1a:ac:54:b5:80:f5:1d:aa:ee:a6:da:30:79:b2:
b3:de:81:a6:f5:ba:a6:4a:71:61:e5:01:83:3c:45:
6b:10:55:cd:20:9f:78:f8:03:36:a8:4d:ff:9c:1b:
d0:bb:13:6b:98:a7:3b:db:0d:1a:06:42:59:b2:d8:
b2:c8:5f:90:34:8c:d5:b2:39:5b:06:f2:f9:70:4d:
ae:f2:d4:62:0d:bd:21:6e:17:39:71:cc:c9:93:df:
99:39:b7:53:8c:c8:6c:d7:de:3d:05:d3:78:83:74:
27:3a:c4:1a:f1:ef:30:2b:ce:15:fd:a4:3e:0f:d6:
be:8f:00:ed:de:39:12:bc:a6:3a:be:73:ca:e3:1c:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:45:B5:4A:7F:98:84:12:25:E7:8B:DD:E3:9F:55:92:BB:12:0B
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:ad:b6:b5:56:a8:45:e2:92:b6:f7:69:27:19:3e:b1:ff:
bc:eb:3f:96:35:88:b1:54:8e:ca:55:93:77:b5:99:2a:41:f0:
93:01:48:84:49:5d:55:b0:c5:f0:7b:fa:9d:30:49:ac:ad:eb:
84:69:66:bd:e6:7c:53:42:91:31:a2:e6:fa:18:f4:e3:28:12:
97:bb:30:e3:8a:dd:63:05:54:5f:c4:3e:b6:21:34:7c:2e:94:
c8:7a:50:c7:04:1f:dc:64:73:6b:2d:05:6d:72:33:d1:34:25:
06:b2:e8:f3:c3:09:89:f6:f6:31:12:d0:dc:0f:9d:35:95:16:
0a:1f:be:52:00:4c:fd:cb:4b:ff:b6:c8:ba:da:4c:85:cd:8a:
ab:88:1a:94:59:53:82:2d:12:f1:2c:78:f6:5d:e5:c1:3c:f3:
23:d8:d9:aa:44:1a:71:3d:f4:5b:f1:fc:01:af:70:08:6a:05:
d9:c2:12:21:fb:e0:38:2b:e5:11:79:ef:16:6b:81:db:fa:ef:
44:fc:50:ea:8e:d6:10:83:4a:2c:3f:78:27:d2:1b:7c:5b:66:
ee:5d:43:0a:f8:b5:5a:10:b8:f6:5c:20:28:78:ec:73:e3:a2:
a8:92:fe:e4:f5:66:b9:ad:33:ce:72:72:b4:14:79:4f:b9:60:
50:d7:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:16:59 2025 by rpki-client