Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: kaZZwk9B/k1mhvMw6BF4fwcj7yzZkLufdRkecEnZ9RE=
Subject key identifier: 22:98:FA:96:A0:BC:71:CF:A3:29:69:60:80:D1:1D:A9:ED:6A:ED:18
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 0197C2DBB36F76E448F6F6B8581489835F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 15A1
Signing time: Mon 30 Jun 2025 22:01:07 +0000
Manifest this update: Mon 30 Jun 2025 22:01:07 +0000
Manifest next update: Tue 01 Jul 2025 22:01:07 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: s9/OmCQCvkEdU1kt9mtU4epgOK3VzScQH0mhajY4HJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:b3:6f:76:e4:48:f6:f6:b8:58:14:89:83:5f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Jun 30 22:01:07 2025 GMT
Not After : Jul 1 22:01:07 2025 GMT
Subject: CN=2298fa96a0bc71cfa329696080d11da9ed6aed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:ea:4c:18:1b:1c:c9:9a:2c:99:1d:68:a5:
23:cc:2f:80:05:95:a2:25:d5:bd:50:54:a4:64:09:
3e:07:f5:a5:74:78:6a:a2:cf:26:89:e2:40:f0:c5:
b8:a2:0f:71:e9:21:00:1a:e5:e2:a0:f7:9a:25:ab:
d3:48:50:70:91:de:a6:86:53:c0:22:29:54:55:92:
82:85:68:b8:b3:46:c7:fc:84:dc:2e:21:2b:a9:42:
73:21:c5:d3:29:ff:a2:93:e9:5a:a9:c5:1f:55:18:
65:0b:87:65:f0:4b:e1:a8:72:a9:5a:fd:46:4b:57:
79:a8:a7:2a:29:db:08:a2:4a:11:b4:f1:e2:eb:f6:
91:27:8a:04:8e:77:e0:6f:a7:05:93:29:85:b8:42:
16:fe:21:02:df:9f:81:d3:0a:47:39:38:d9:73:a2:
b7:94:e7:6d:a3:cd:85:ef:6a:8a:9d:43:45:89:f7:
20:24:09:6d:12:97:21:eb:8c:55:33:0c:24:61:8d:
16:b1:01:a3:6f:bc:39:6e:5b:58:3e:c0:fa:3e:26:
b9:45:c1:a4:c2:74:49:c2:51:ad:33:f2:e2:fc:d7:
84:f9:0f:e0:25:a0:19:5f:f4:d3:80:dd:64:5c:20:
64:ae:2e:d1:8a:56:a0:66:de:d4:4a:db:ad:1f:ab:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:FA:96:A0:BC:71:CF:A3:29:69:60:80:D1:1D:A9:ED:6A:ED:18
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:67:59:70:64:44:9b:ba:82:d6:71:46:7c:fc:0a:d0:9f:
84:ed:66:95:01:36:f0:fc:71:33:af:81:97:3e:aa:93:3c:d7:
f8:72:e7:ad:2b:0e:01:1f:62:d1:e4:52:e6:7d:1f:60:3f:3c:
f1:8e:90:e4:77:53:d6:90:fb:44:10:9c:33:8b:73:08:66:0e:
c3:2f:60:d3:2b:e7:aa:21:11:49:29:19:b7:dc:8e:70:2e:5e:
b8:3c:96:6f:5b:d6:81:12:9e:3f:70:fa:a0:69:e1:f1:51:92:
73:27:ba:56:0e:07:2c:fc:04:c0:80:6d:d0:97:7a:da:0e:7a:
07:1a:f9:0a:e5:99:2b:7e:85:b6:c7:7e:5b:13:f6:46:ac:60:
e1:cf:c1:39:b4:46:c2:2a:cc:63:29:2d:fa:1b:fb:06:f1:d8:
ae:44:d4:7f:57:51:1c:d9:1e:3a:f6:b2:6f:02:7f:d2:fc:b1:
b8:e6:51:c8:45:42:ce:35:06:39:ec:cd:df:0a:5a:f4:3b:eb:
76:1f:00:0d:71:1e:12:46:76:58:ec:e9:17:01:94:f2:8b:96:
b9:60:45:cc:c2:bf:5b:25:b9:de:a9:7e:48:47:90:04:dd:78:
ff:a3:6a:18:fa:2c:44:1a:1a:de:9f:85:20:5b:3d:d9:ee:36:
c7:64:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:59:04 2025 by rpki-client