Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: p0xxVa1qQOnAN799g2u8ZfA7ludnQe1ONikJzN/eLj8=
Subject key identifier: E6:6C:BE:00:1A:EE:AE:11:34:42:00:7F:11:7A:8E:40:E2:8D:17:55
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0197B745386B8F48C9F46D0A96A52D2514A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 136A
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: 8VWdbwuahqcw7zclxs3ZXPAVWno.roa (hash: ZO8J4VlFR2M5Qop1zlocM8dgwe5Uq6otS6RyEiq+ukI=)
2: GAmyQv8-gT8CZ7d-txbZl5EhOio.roa (hash: iUcK9uyMQ6focHOP9BZWCHQasgvLPeszd6U4NOgrxL8=)
3: ZfBa2kOopYZN1zSmKbC-lmjGWMU.roa (hash: XOVEAESgfg7MRdYVfSlFUrFkfMe08NvtY8t3C+PTjsk=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: VMWxATLlaDEGpCZnBNUMfjDj/34pEVu/IKOjBAvFXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:38:6b:8f:48:c9:f4:6d:0a:96:a5:2d:25:14:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=e66cbe001aeeae113442007f117a8e40e28d1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:59:94:f8:d3:a5:37:a9:5a:c0:c4:20:19:
cc:5d:b0:eb:bf:2f:11:4e:75:c4:f8:7e:60:20:e1:
06:ba:b5:5e:0c:6e:65:48:b4:a6:b0:0c:1a:81:32:
a6:3e:5d:a4:53:1d:e5:b4:af:5a:58:b4:05:b8:35:
d7:65:70:b4:25:52:b2:c3:6d:9f:f8:c5:aa:9f:d1:
1a:41:f5:f4:81:ee:36:f3:5f:e5:d8:f3:94:19:9c:
12:5d:52:74:ae:29:7a:ab:17:ba:7d:e9:71:1c:61:
a3:c5:52:6b:1e:27:91:d4:88:2e:76:3b:4e:30:35:
b8:ce:11:56:d9:32:c5:e3:6b:41:67:e0:f1:3d:d1:
d4:21:e0:a4:7a:f3:c1:db:81:fe:3c:71:e4:cf:54:
78:6e:ff:0c:64:b3:6e:68:20:a5:98:99:a3:d8:5a:
01:18:be:8d:71:65:16:74:e2:23:f6:93:49:03:8b:
32:c2:08:b7:d2:e7:9b:d1:30:81:1f:88:a0:6c:0a:
9b:45:d3:ee:4e:16:a0:f7:e3:6a:8d:82:71:a3:99:
62:cf:0f:61:a7:d1:79:73:27:0b:f7:42:f1:31:75:
e8:db:a8:7f:a4:e4:34:8e:17:19:d5:15:4e:2e:fb:
90:27:83:8b:1c:be:3a:e0:a6:69:fc:a0:25:9f:ce:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:BE:00:1A:EE:AE:11:34:42:00:7F:11:7A:8E:40:E2:8D:17:55
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:0b:ac:ef:c7:87:c9:58:c8:04:d7:1a:f9:f7:2c:08:54:
c2:44:08:a7:7d:15:b5:e7:46:ff:9d:67:16:c6:94:8a:3f:09:
1e:b2:0e:87:1c:ff:05:70:e7:df:be:79:55:97:4e:6b:d7:84:
5a:b7:fc:1a:d9:50:c4:81:94:60:4d:23:25:74:a7:a8:84:5e:
a3:8e:f7:6b:1b:ad:c1:de:a5:4e:c3:46:c1:c0:a4:bd:1c:2f:
77:9e:92:01:5a:c9:70:42:e6:f4:2f:3e:18:65:71:81:55:ec:
d2:5a:48:19:19:70:3f:45:de:a7:e8:77:07:88:d9:af:27:ee:
68:05:93:fe:bb:25:62:4d:d0:9b:f0:4a:e8:1a:48:15:85:b7:
d9:55:1f:0d:cd:e2:52:81:c8:09:c4:56:b1:43:d7:db:0d:ff:
59:46:17:f3:7c:0d:a6:24:28:d0:8f:11:34:3c:aa:15:93:9b:
c4:b4:df:84:31:f6:1c:6a:de:ad:8c:c3:6b:a2:66:07:b6:ef:
06:47:6a:a3:5f:43:12:5b:d7:f2:56:5d:93:5a:57:18:cb:b7:
32:85:f7:cc:17:89:7d:79:78:a9:88:51:61:e5:15:e0:cc:c5:
8c:38:9e:d0:94:09:bd:17:66:7e:34:f2:f3:0d:5c:d9:a1:65:
d6:f1:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:57 2025 by rpki-client