Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: M6RQTSeVjrYN7FN05EBQ8h0hbLVLN6ycgYY2zBnmUbo=
Subject key identifier: AC:D0:60:E8:FA:F5:9E:4A:F3:6D:2D:93:17:9A:0B:F1:44:54:C0:BA
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 0197B6A209E1DB09BBC744C7BCD4EF18A15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: HY7d1mbHv+mnul5Tl2SRU1h6fMi/IRZ/kaX+W7je4Sg=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:09:e1:db:09:bb:c7:44:c7:bc:d4:ef:18:a1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=acd060e8faf59e4af36d2d93179a0bf14454c0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:77:d5:ce:2b:ef:3c:a0:6e:82:1c:7b:de:
a4:cc:ef:a6:cc:c4:09:c2:fd:33:27:d7:d6:f0:d5:
a1:58:2d:f2:d9:fe:d6:62:36:dd:32:f1:91:db:65:
c0:9a:97:c9:7a:1f:76:40:2c:3f:67:bf:ba:f9:9c:
a1:09:81:d4:1c:19:75:c9:67:95:dc:c4:86:68:23:
99:ab:76:b9:1d:df:13:a5:be:7d:11:f3:52:b6:e9:
f7:f4:ca:c9:2e:25:f4:38:83:f6:74:31:4d:e9:fa:
86:85:bb:53:80:88:7f:05:07:8c:a5:89:43:75:42:
9b:33:fe:c0:c0:d7:45:e1:3f:e3:07:ac:58:2d:d6:
11:5e:94:cd:34:ec:5d:4e:fb:74:cf:cf:89:fb:79:
3f:4a:be:2e:8f:f7:1b:ca:0a:b4:59:1a:8b:af:9f:
46:7f:83:cf:0a:81:9f:f1:08:c0:ad:82:49:88:94:
ab:73:30:13:91:18:c5:13:9f:ff:f3:43:f1:df:fb:
9c:be:ef:0b:7a:2a:71:8e:62:a1:c0:96:bf:16:1e:
1f:c8:f5:d1:c6:42:b9:8a:e3:33:00:63:4b:d1:e8:
74:17:21:15:50:aa:8b:69:12:f8:c4:b2:4b:69:2f:
8b:48:52:6f:a9:fc:41:af:b2:9b:f4:d4:18:e3:b2:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:60:E8:FA:F5:9E:4A:F3:6D:2D:93:17:9A:0B:F1:44:54:C0:BA
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:49:c4:79:95:42:e7:d9:d7:0c:8c:db:61:29:6f:16:e9:
72:ea:5d:2c:4e:6b:68:d2:01:7f:36:00:c2:e4:5f:9b:60:72:
80:f8:05:f8:46:f1:5d:1d:6f:6b:3b:ff:fa:35:f3:65:10:6f:
af:a6:89:60:1f:81:77:f4:2d:f2:3d:65:44:9f:20:61:51:cc:
69:7d:ef:d1:6d:1a:46:61:0f:b1:4f:23:9a:4a:2f:d2:8e:50:
23:17:83:70:d3:f8:bb:42:e5:b9:b5:ca:c1:70:70:c0:20:3f:
6d:1c:c5:2d:8c:6c:a4:a4:cf:7f:9e:de:fa:4d:94:a6:f3:53:
a3:c7:c0:5d:2c:ac:1c:91:2e:64:f4:3d:6c:93:f6:97:f7:26:
67:a7:1d:7b:0f:fe:26:81:23:76:93:c9:51:fb:bd:b3:61:fa:
a5:99:66:60:25:86:7b:a0:40:1d:ed:83:a8:85:93:d8:c3:28:
6a:4a:fa:69:14:c9:5d:ac:57:21:11:dc:22:a6:59:37:11:9a:
ab:ea:06:a7:10:6b:44:c5:90:a9:6b:83:d8:00:41:e8:b4:92:
c2:d2:a0:be:68:97:1f:48:e4:74:73:dd:c4:7c:ac:09:6d:a8:
04:f2:fb:a2:d2:31:77:d7:c7:6f:1d:c4:6d:27:45:50:d8:26:
a7:8c:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:35 2025 by rpki-client