Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: HZ/pECmwwLAd7jRuHE8XmnFS55cC46Nf84a+dqik6NU=
Subject key identifier: 84:38:AE:B7:69:D1:BF:C5:6C:1E:00:35:CE:95:AB:DF:34:38:B6:61
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0197B5FC68AF6414594462E97E1D6D30E88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0D07
Signing time: Sat 28 Jun 2025 10:01:47 +0000
Manifest this update: Sat 28 Jun 2025 10:01:47 +0000
Manifest next update: Sun 29 Jun 2025 10:01:47 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: yV0ucVKzyRfMyswTj2rdpCqcSGwYFbVzs6/mh65HnPM=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:68:af:64:14:59:44:62:e9:7e:1d:6d:30:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jun 28 10:01:47 2025 GMT
Not After : Jun 29 10:01:47 2025 GMT
Subject: CN=8438aeb769d1bfc56c1e0035ce95abdf3438b661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:2a:7f:40:06:8d:20:2a:f3:5b:09:d9:2f:
b1:35:39:c5:2e:fb:6e:92:28:91:9e:6b:19:cf:fc:
61:83:db:34:74:85:d0:ed:e6:99:42:eb:8d:ce:55:
31:ee:eb:d1:fd:7b:f9:65:b7:fc:bb:c6:f8:f0:13:
60:55:52:63:c3:7c:c1:d8:92:69:5d:10:8b:06:fd:
87:f9:eb:51:bc:c4:20:03:fc:fb:91:4c:df:39:6a:
a5:e5:df:3c:79:d8:bc:06:d5:fa:59:a4:de:0d:d3:
1e:d0:23:ce:03:88:10:db:58:4e:d8:54:72:40:b5:
19:02:75:85:7b:03:c0:61:a9:f6:56:64:2b:41:c9:
16:7f:22:4a:90:fa:6e:f2:d1:74:7e:16:83:e9:a7:
17:7c:f2:32:5e:87:64:03:8f:33:63:4f:1e:91:bd:
c4:e1:03:b7:82:58:47:f6:22:e4:24:18:81:ce:79:
d5:03:ef:89:6f:40:10:30:8c:7e:9d:73:68:65:0c:
c1:ff:45:ff:c9:15:01:2d:ba:b1:f3:4d:a0:ab:55:
f3:a9:da:55:b9:8d:cb:71:45:ad:98:df:5a:18:a0:
45:6b:0a:04:99:82:9d:29:cd:67:07:53:b1:9b:1f:
0e:e6:ef:82:6e:0d:d0:57:6e:c9:3c:36:aa:76:1b:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:AE:B7:69:D1:BF:C5:6C:1E:00:35:CE:95:AB:DF:34:38:B6:61
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:31:70:b3:96:2a:1b:2c:65:68:bb:c9:59:29:dd:ec:d6:
2b:65:6c:d3:63:e8:33:b0:8b:9d:36:4a:ed:5c:ed:52:5c:32:
a4:80:47:30:4d:cf:9a:f5:14:06:1b:ea:a2:e7:a6:b3:a0:db:
a3:f5:7a:9b:4e:33:86:29:7c:0a:b4:0a:d1:94:e7:8f:0f:22:
60:0b:15:be:f8:d3:4b:f7:4c:d9:de:90:c1:e4:0d:0a:c5:a0:
75:00:a9:14:d6:dc:66:9f:eb:7e:d9:21:f0:50:0a:84:55:c4:
86:db:cc:99:2d:e1:50:2e:30:c3:ac:ef:70:9a:62:a6:d0:e7:
b0:80:5c:16:81:26:35:2f:c5:5e:d7:72:ea:ca:95:78:ad:f3:
76:55:ef:5d:a2:fb:49:b7:9f:fb:05:00:38:62:74:2a:8b:8d:
1e:f7:a5:5f:b7:44:f3:b8:24:cb:80:09:b3:53:dd:18:ec:24:
d0:9f:4b:c1:3e:98:20:76:bd:ee:2b:5b:15:3d:55:91:49:58:
43:60:c0:58:60:0f:c2:de:89:87:78:7d:b4:ba:14:1b:55:ba:
ec:5a:9a:e1:3c:98:34:aa:7c:2f:5c:d3:54:24:b2:1d:25:d5:
43:a2:52:2c:e5:4d:6f:46:d3:72:5f:04:49:82:8e:7f:95:45:
5b:2d:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:32 2025 by rpki-client