Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: X5f6exe8HHLdANpfszQgHhhBIogWopvBOkOapB1p+7w=
Subject key identifier: F1:1C:D0:B0:C8:FE:47:EB:22:13:6C:F0:13:5B:10:20:F3:C2:78:9A
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0197C56EFF0ECA9C2A07783B4C23564F2B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 023A
Signing time: Tue 01 Jul 2025 10:01:15 +0000
Manifest this update: Tue 01 Jul 2025 10:01:15 +0000
Manifest next update: Wed 02 Jul 2025 10:01:15 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: T0eqp10BVFGTjTtuJOc9QSDObLO9h5XmQoguSChailI=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:ff:0e:ca:9c:2a:07:78:3b:4c:23:56:4f:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Jul 1 10:01:15 2025 GMT
Not After : Jul 2 10:01:15 2025 GMT
Subject: CN=f11cd0b0c8fe47eb22136cf0135b1020f3c2789a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:38:72:d0:d1:3e:4a:91:88:2c:94:64:7a:
6d:23:43:2f:2a:b3:c9:4c:be:20:3d:f0:61:7a:59:
64:74:58:e7:1b:2a:24:6e:c4:58:70:d4:a0:74:e8:
30:47:7f:13:e2:d6:9f:00:d6:ff:a7:71:31:16:5a:
a0:e4:13:ad:54:21:f4:54:cb:0c:8e:af:97:28:b6:
43:8b:5a:26:71:54:c2:86:3a:0d:15:bf:c9:cd:f6:
32:5b:f5:89:56:be:6c:92:15:4d:04:4a:96:59:90:
7a:f6:35:9b:fd:f6:b2:18:9a:70:83:ec:82:93:a3:
d1:09:d3:f9:5d:f5:80:b1:74:4d:5a:e6:5b:83:22:
d3:e0:87:97:28:2b:91:11:fb:2a:00:98:15:79:57:
37:21:b4:c1:84:f4:9a:93:78:5a:87:96:c6:97:11:
ee:e6:c7:3e:c4:99:67:6c:57:b5:ee:29:c3:7f:d8:
4f:fb:c7:be:bb:69:c3:58:ca:f3:88:80:87:86:a8:
76:4f:b1:c6:74:4f:dc:14:a4:30:ab:f6:8d:25:a7:
2f:2a:36:36:81:77:5a:b6:22:e6:0a:fa:28:af:f5:
e6:f3:57:01:7f:2a:85:9f:a9:48:9d:15:97:e3:6b:
ce:a5:8d:0c:cb:55:de:a8:78:91:f5:19:83:02:f6:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:D0:B0:C8:FE:47:EB:22:13:6C:F0:13:5B:10:20:F3:C2:78:9A
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:63:64:71:a0:da:c9:ff:87:0d:a4:cc:05:45:fc:e3:7a:e6:
d0:47:00:8f:a5:bb:06:59:2a:4c:51:d6:3b:33:91:5d:c7:57:
bb:f4:87:74:d4:75:ab:e4:8b:03:18:23:8c:16:34:35:5f:a7:
76:d9:da:1c:ae:0d:64:81:93:c0:bc:f4:5d:70:ab:ce:7a:62:
80:fa:f7:c2:8b:0f:8c:46:38:ab:cb:e4:14:45:d6:f6:9a:7d:
99:95:20:1f:fb:54:09:98:6b:ea:d2:06:a9:02:7c:33:27:70:
dc:a2:87:8d:2c:a5:3b:b1:fb:c2:58:e3:9e:e3:20:6f:c8:19:
40:4d:0d:5e:f2:d6:55:ec:29:d6:f6:44:19:cf:15:cc:8c:c1:
af:b3:31:de:2c:72:53:71:87:92:f6:39:be:ca:48:10:19:c3:
c2:b2:c8:dd:78:3b:b7:de:6a:f6:1b:27:1b:6a:fd:01:77:fd:
2c:00:52:39:93:9e:a5:13:5c:3e:14:fc:aa:bd:22:40:8c:84:
bf:12:60:0b:4a:a6:f2:be:06:52:da:62:99:39:15:b2:a8:81:
8a:d0:bc:2b:50:a3:03:18:8d:4c:0a:7a:a7:64:5c:65:68:9d:
d1:73:18:1f:1e:9c:52:c4:98:b2:43:40:51:4d:63:7d:c6:f9:
d4:27:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:18:49 2025 by rpki-client