
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: qWdg+W4O629sjt9E2if7eBLkLA3lNi63ruZGBMSTJbU=
Subject key identifier: C3:81:90:EE:7A:0A:15:C8:D5:D8:2B:CC:45:9B:30:7C:E3:A3:C9:78
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 0197CB39FBE28257D32A3B145386763FCF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 050C
Signing time: Wed 02 Jul 2025 13:01:04 +0000
Manifest this update: Wed 02 Jul 2025 13:01:04 +0000
Manifest next update: Thu 03 Jul 2025 13:01:04 +0000
Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: aa2WPAhe3pY3EcjyeAMqikbGjDfI+dzZHD6BpC1FBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:fb:e2:82:57:d3:2a:3b:14:53:86:76:3f:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Jul 2 13:01:04 2025 GMT
Not After : Jul 3 13:01:04 2025 GMT
Subject: CN=c38190ee7a0a15c8d5d82bcc459b307ce3a3c978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:33:a7:ed:fb:99:b9:58:cf:56:85:4f:6a:
78:aa:f4:fc:86:3b:d4:59:5d:41:95:bb:96:bd:9b:
a3:60:da:15:ad:36:81:d2:a5:b5:09:60:56:6e:16:
88:df:c3:ee:53:36:1f:ca:c5:47:64:55:56:9e:89:
65:6b:1e:81:fa:ef:55:e1:78:ac:e7:b4:e2:ca:71:
fd:b8:3f:59:a9:1d:18:7f:f4:d2:d4:2e:e2:19:58:
8a:ec:f7:20:0c:fa:85:c7:f8:8f:3c:d6:77:91:1f:
e0:de:6a:bc:a6:2d:fa:64:3b:9f:81:b5:e4:69:ce:
d9:d5:3a:8c:89:7b:14:5e:16:b6:95:e8:9d:d6:63:
70:5b:b3:00:78:ea:26:f4:b9:b1:87:08:46:66:3d:
24:dd:64:7b:ee:a3:6b:74:5c:0e:2a:52:41:41:4c:
b5:34:7b:82:73:6e:42:c8:45:5c:9e:f3:61:3e:2c:
91:37:22:eb:b7:e2:db:49:ff:a4:47:a2:18:b7:67:
b4:e3:da:e9:3d:b1:76:09:9d:c3:fc:fd:90:71:4a:
2f:1e:ac:a2:7a:7a:d7:df:03:d8:73:ef:8b:33:73:
20:dd:c5:f6:f4:02:59:64:90:43:b3:78:56:2b:48:
22:22:0b:b4:08:78:38:df:15:cf:9c:1d:6c:1e:c9:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:90:EE:7A:0A:15:C8:D5:D8:2B:CC:45:9B:30:7C:E3:A3:C9:78
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:3a:e9:06:da:35:b2:f2:f1:48:4e:f3:8f:26:97:6b:43:
29:e9:27:91:e5:ab:c6:75:a4:08:6a:1d:f1:08:12:97:8e:b9:
25:62:2d:2e:72:60:ff:fb:cd:e5:f4:9c:da:47:a4:50:9c:33:
6e:df:04:4d:28:15:e6:23:bb:6a:35:c1:09:68:c9:a6:02:ed:
7c:17:f2:25:fc:98:6f:33:5c:2c:d7:0b:93:4d:f8:44:96:6c:
24:00:75:b9:3d:8c:df:90:7a:ff:3e:18:ca:b9:a7:d3:c9:a1:
9c:4b:26:45:0b:1f:ab:f3:24:c3:4c:4e:86:c5:95:c2:33:6e:
de:08:f8:d2:66:3f:44:58:e3:96:ca:05:72:33:96:4f:c2:2f:
88:29:78:b8:0b:4c:61:48:48:ee:f6:df:bd:13:9f:e2:a5:7b:
0c:fd:08:b2:57:73:06:1e:d3:37:b4:d0:9d:e9:13:18:80:f2:
d7:7e:17:68:cc:46:29:3e:fb:f6:37:78:e6:9f:19:3d:7b:83:
78:7e:ea:2d:35:ee:3b:56:98:08:82:9f:66:07:3c:9d:c6:e9:
3a:ba:ac:9a:61:a6:75:c5:a1:ac:e5:3c:05:0c:6c:b7:a5:80:
7b:99:06:7c:a9:f7:1c:1a:ce:fb:16:d9:19:ad:b7:59:2c:f7:
ca:b2:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:37:19 2025 by rpki-client