Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
File: L6dldTzv6BbTiyUDeclXZqlvBtc.mft (raw, json)
Hash identifier: ExpLONf1QnJ/EQK3WbKakA69aTRB1nvWv7lK4uL+vMM=
Subject key identifier: 4F:6D:E1:D5:80:27:2A:77:CA:46:85:AF:D3:56:AC:F3:BF:00:82:5F
Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7
Certificate serial: 0197B7B3139FC55E21B1AFE709839AFC9CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
Manifest number: 11EC
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: L6dldTzv6BbTiyUDeclXZqlvBtc.crl (hash: it96cADQP59io1q1gvH2dsjx+rRgQzsd3kN7oGH/xjU=)
2: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (hash: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:13:9f:c5:5e:21:b1:af:e7:09:83:9a:fc:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=4f6de1d580272a77ca4685afd356acf3bf00825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:a7:b9:fa:ff:6a:6f:89:bc:dd:af:8a:99:
0a:3d:cd:21:7b:b0:59:0c:28:94:ed:18:1f:19:18:
f4:d7:cb:01:a3:6d:09:5b:9e:a9:22:90:c2:51:14:
9d:1d:d1:bb:5e:03:fb:82:23:17:a2:e6:ec:be:2c:
64:8c:6a:d9:17:a3:77:85:02:da:95:ce:f4:0e:61:
9f:4c:ac:f8:65:e5:4c:84:8c:f4:51:27:56:b9:7a:
67:a9:60:19:16:fe:af:a0:ca:c8:5e:04:79:8b:a1:
a2:90:d4:dc:13:a1:d8:84:66:07:1f:81:c2:49:d0:
a5:cf:a0:53:c6:e5:6a:aa:77:5c:b7:b2:c7:09:7b:
dc:fa:76:89:a0:31:43:05:9a:8d:dd:54:bb:02:19:
73:d0:56:12:95:a6:47:4b:93:8d:d7:8b:9b:ae:c7:
0c:d9:a7:5b:d2:4c:77:90:f0:a1:2e:16:b8:23:40:
ad:6e:69:79:29:ba:2f:df:62:39:ab:c1:85:52:08:
f3:74:da:ad:9a:89:c9:57:f9:f0:d1:66:7d:49:ff:
64:94:59:49:36:04:86:6d:ec:14:13:d0:65:8a:21:
81:15:f2:3d:14:47:1a:55:36:16:12:a8:2e:8a:00:
ec:1b:c8:24:9d:25:64:f3:5f:04:d8:f9:5d:f8:76:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:E1:D5:80:27:2A:77:CA:46:85:AF:D3:56:AC:F3:BF:00:82:5F
X509v3 Authority Key Identifier:
keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d2:e1:4d:c4:cc:1e:31:4e:e2:0c:29:0d:fa:04:ba:62:c9:
ae:3c:21:b9:2c:7e:94:28:4f:02:5d:4f:7b:76:8c:e5:35:9f:
44:42:48:a9:2d:95:a8:80:25:00:37:e4:1b:4d:42:f3:b2:67:
e9:ed:a8:a7:17:3d:62:08:d5:6c:9c:bf:44:6d:15:19:30:59:
ba:34:31:b9:cb:ca:4f:11:1e:08:b1:4a:ec:38:78:83:34:7f:
b5:8f:b5:87:b3:97:37:89:46:e4:12:df:97:fa:c1:06:5a:57:
f4:ac:6b:28:ac:5c:23:3d:02:c1:1a:4e:ed:4a:14:26:75:47:
b0:3e:f9:70:79:ec:55:54:ef:cc:52:81:ac:0e:fb:f1:4a:3c:
eb:1c:04:3d:be:7b:91:f0:1a:b8:b1:05:37:4a:a4:3d:3b:ef:
05:f3:bd:68:4f:60:a4:c9:01:bd:2d:d2:62:40:5a:af:74:59:
e6:a0:98:05:da:0f:47:f5:a0:fd:48:9d:5b:a3:66:a1:3e:8b:
c2:30:54:f1:9e:a9:a2:f3:a9:7f:96:9e:27:8b:b6:18:01:06:
04:9a:30:4d:d3:f7:ac:2b:ae:42:e2:c9:a4:bb:91:b4:20:41:
3d:b2:24:de:11:32:83:68:7c:2f:2a:f5:22:93:2a:e2:40:7b:
64:0f:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:11:14 2025 by rpki-client