Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: ecDIO3ExoqQMOXOTxMbA7SvB1FhlYBGoCNQ2QO/AiRc=
Subject key identifier: 4C:17:22:FE:9B:00:4B:79:3D:D9:F3:49:B8:99:0B:CD:54:63:B4:00
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 0197B88EE84F02B9D39F3BA830A69CD7997E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0C60
Signing time: Sat 28 Jun 2025 22:01:02 +0000
Manifest this update: Sat 28 Jun 2025 22:01:02 +0000
Manifest next update: Sun 29 Jun 2025 22:01:02 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: OBEPTHIRvR2Gk/5FJXteZQpkpGPAu6Ymh513DN16e7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e8:4f:02:b9:d3:9f:3b:a8:30:a6:9c:d7:99:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: Jun 28 22:01:02 2025 GMT
Not After : Jun 29 22:01:02 2025 GMT
Subject: CN=4c1722fe9b004b793dd9f349b8990bcd5463b400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:12:f3:f2:a4:86:56:89:a2:23:0c:6f:7b:
bf:ae:1e:d2:bd:f6:70:ab:21:2d:4d:9c:d8:2c:f9:
2e:85:f7:22:9e:43:20:6f:e3:7a:00:14:2f:94:14:
b2:2e:35:f7:9d:9e:41:0d:9a:b0:49:aa:61:30:21:
4b:6f:b8:fb:d1:93:74:16:78:e9:bd:ee:dc:e4:a8:
d1:51:8d:3b:25:6c:8b:66:8b:93:cd:77:a7:bd:41:
24:9e:5e:39:a9:72:4e:f2:1b:34:7f:b5:f3:06:c4:
b1:79:ad:aa:21:c6:58:90:d4:21:4f:d8:55:e2:bd:
b7:0a:54:4a:40:aa:2e:f0:1c:90:39:c5:15:85:7d:
1c:70:6a:e6:90:3f:ab:0f:c3:6a:23:c6:b7:96:08:
b4:eb:db:21:a2:bc:d3:25:f7:81:3c:ba:5d:cc:a7:
31:4a:26:b3:28:59:b5:e5:cc:8a:36:df:08:bc:ee:
22:50:ff:7a:ed:16:c3:10:35:80:ff:8f:cf:4d:76:
90:25:3b:2f:98:42:ba:c3:b9:2a:65:fe:1f:67:93:
49:1a:3f:5a:99:9d:2d:9e:64:14:82:72:98:3f:b9:
fa:7a:22:10:76:0b:ab:0e:f8:ad:64:78:0a:37:26:
78:85:43:04:fa:ea:48:7d:65:d7:98:60:66:eb:71:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:22:FE:9B:00:4B:79:3D:D9:F3:49:B8:99:0B:CD:54:63:B4:00
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:86:26:e0:37:81:ef:b7:e9:f4:28:fb:43:87:e5:02:dc:01:
42:b1:e1:85:5b:28:81:12:b1:57:81:4e:9f:71:80:67:2f:54:
44:17:b7:ca:04:69:a0:03:cf:e8:da:8e:58:66:c3:93:cc:3b:
71:3d:fa:6a:4e:d6:b4:98:2d:d8:80:af:c3:75:84:35:62:91:
e7:96:a8:8d:1d:0b:3a:b7:76:1f:e3:ed:8c:80:4b:0c:1a:53:
f1:b5:d6:da:77:db:e5:48:ca:4d:d9:20:61:2b:78:9a:0d:86:
42:44:9c:0c:80:af:db:f2:33:e2:f4:9a:18:b9:29:75:0d:4f:
06:00:35:88:2e:20:f1:16:8f:b3:9d:95:b8:6e:ee:96:a4:f5:
ff:6a:87:6b:05:ae:34:1d:e9:d0:87:d0:a7:03:d3:3f:96:c5:
7c:fb:56:48:49:28:cf:3d:82:4c:9f:ed:70:46:64:d2:c5:0d:
2b:c4:b6:c1:50:28:a6:99:59:05:ef:60:6f:dd:14:bf:1b:d0:
2a:e0:c9:1b:e6:26:c0:9a:ef:7b:29:58:ba:79:67:8e:e1:ca:
b2:c5:68:40:90:89:a1:5b:e9:87:63:ef:1f:da:0c:0c:a1:6f:
86:cb:77:4c:12:84:54:83:a6:c2:fc:fb:e8:2b:ef:ab:d2:fa:
e1:9a:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:39 2025 by rpki-client