Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: n8xejjvB1k7BGL9iRc3fwMA3QEVBmk/bypJDmi8vwW0=
Subject key identifier: DB:FC:5D:B8:EF:2B:42:A8:2B:83:30:C5:CF:10:1B:29:BC:18:4A:00
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0197B77C6067A0E4046836FB45F2AF03D9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0E6B
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: R8JUrlAhYAOMUM8ga+VdMw7zO4UqpgmwfEFgjWJyl2c=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:60:67:a0:e4:04:68:36:fb:45:f2:af:03:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=dbfc5db8ef2b42a82b8330c5cf101b29bc184a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:51:5b:31:53:6d:5d:1a:d9:ea:23:0f:80:
5f:26:fe:6d:11:87:2b:9d:27:dc:70:43:c3:b4:45:
8c:77:f5:b9:01:ac:cf:7e:74:a1:6b:8b:07:1c:60:
2d:8f:7c:28:93:c5:37:a6:14:6c:86:ce:b8:72:0a:
fc:d1:1d:b5:70:5f:3c:c2:2a:dc:79:59:8c:77:43:
a2:d7:87:14:8c:ce:3f:5f:de:13:9f:a6:09:16:84:
1e:5d:85:85:78:b5:ff:3c:8d:70:63:f2:19:76:45:
af:1c:3a:cd:59:cc:c4:11:c8:e9:df:52:eb:01:73:
14:83:34:b9:70:e0:5e:3b:13:77:24:60:c5:fb:1c:
d8:c7:fa:c0:ef:df:35:4c:fb:27:09:d5:9b:a9:17:
0c:c6:69:81:a8:df:06:d4:64:09:32:ae:cb:e4:fd:
76:7f:41:93:22:32:cb:5a:63:bd:4f:c3:54:32:98:
0d:56:70:91:e1:32:6f:97:bf:2b:3c:b3:be:8f:80:
fb:fd:2a:aa:b8:8f:e5:a5:83:42:db:53:29:65:d6:
9f:bf:65:2f:5c:82:6b:35:1e:2a:07:81:e9:ef:1b:
10:72:d6:bd:2b:18:0c:73:68:e1:5b:a2:5f:76:5a:
06:dd:f0:c5:9f:94:ab:39:e3:cb:92:90:a6:22:3d:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:5D:B8:EF:2B:42:A8:2B:83:30:C5:CF:10:1B:29:BC:18:4A:00
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:48:97:58:1e:40:47:fd:6e:2d:df:84:cc:13:b0:21:9d:
97:8d:54:f0:fc:5e:2f:1c:00:5f:fe:0f:9e:51:0d:b6:8f:01:
af:12:fd:a2:00:33:fd:0a:41:73:9f:97:0d:ec:7e:b1:e8:e1:
88:a0:dc:ea:18:a2:92:b8:e0:6f:45:c1:db:ec:70:4f:dd:02:
f5:4f:7c:f6:d2:9b:4e:9b:a6:9a:00:f0:62:b1:98:3c:f8:c9:
6b:a3:db:5b:70:09:c0:8b:81:75:e1:c6:e5:be:5e:80:b4:2d:
74:9b:da:d5:e2:4b:18:bf:ff:26:54:39:8e:4f:2a:f7:1b:98:
80:a3:3e:a9:fc:18:37:96:73:38:8b:20:d6:a7:06:2d:0a:0b:
1b:e5:93:92:89:6d:c1:5e:fe:fd:a9:6f:34:ef:76:17:8e:d8:
22:56:4c:8e:fd:13:00:25:3d:90:7d:1c:a0:dd:d7:2c:d7:27:
84:9b:f0:68:51:ae:3c:f3:4b:43:01:b7:c1:9b:ea:73:0c:3a:
93:3c:cb:e3:d9:6e:54:29:a7:68:67:a0:34:d1:9a:37:b3:d4:
49:cb:17:d9:d8:f3:5c:85:26:ae:f4:99:5e:fd:33:de:fe:fa:
0f:bb:e9:72:22:61:08:cf:a4:78:2e:20:7f:2a:32:8c:a7:d2:
0c:fa:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:38 2025 by rpki-client