Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: 10Nm+XQYbXq4qzg5ntTbOWbc6tP23X6frunzBYJbUkY=
Subject key identifier: D0:33:36:17:D4:83:00:B3:FB:3B:3C:29:49:79:9C:6A:07:C3:65:DB
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0197B96B0CF1B9AFE8B4FB843FCE12664E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0C98
Signing time: Sun 29 Jun 2025 02:01:29 +0000
Manifest this update: Sun 29 Jun 2025 02:01:29 +0000
Manifest next update: Mon 30 Jun 2025 02:01:29 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: Kq4HRdTM6jjyWpk+Af7iQMkwOyrbEf32yMjIWpYUoQQ=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0c:f1:b9:af:e8:b4:fb:84:3f:ce:12:66:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jun 29 02:01:29 2025 GMT
Not After : Jun 30 02:01:29 2025 GMT
Subject: CN=d0333617d48300b3fb3b3c2949799c6a07c365db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:72:47:be:f4:9a:a9:80:d6:f0:2c:38:6d:
aa:d0:c1:92:7b:86:ca:46:3a:93:cd:54:b7:08:53:
29:1f:5e:31:59:b3:81:e5:24:27:67:a6:69:95:59:
5e:72:45:48:ad:c5:3f:58:d1:d6:a8:a7:6d:be:f4:
89:3d:aa:e1:fc:38:62:a1:99:14:d0:85:12:94:b7:
32:41:03:06:5c:75:74:70:82:0a:a8:fb:82:8d:94:
0c:c1:85:7b:3b:25:64:dc:df:fb:91:2d:26:71:e8:
2f:09:31:f3:1c:3c:ed:a3:f5:aa:2d:2d:6d:82:e6:
52:17:00:cd:35:57:f7:df:45:7d:9f:57:e7:9b:ef:
f0:08:39:61:96:4e:e9:b7:98:23:37:01:70:9f:c5:
00:09:1c:53:aa:7e:73:a2:2c:f9:06:b0:c7:a7:1f:
5a:e5:b9:63:c2:d7:bf:52:73:56:c4:7f:46:16:ad:
c2:ed:43:7f:bf:26:22:fa:f5:b9:6f:da:75:6a:6c:
bf:84:7d:c9:fd:43:49:3a:8c:1e:63:06:20:39:a7:
b2:b1:79:12:54:c3:7b:7c:4f:bf:89:10:2a:55:8e:
2d:8c:c7:19:95:31:4e:37:9b:00:dd:b8:ce:12:1c:
6a:13:68:25:6b:cb:33:dd:8a:a2:0b:3d:e3:4b:94:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:33:36:17:D4:83:00:B3:FB:3B:3C:29:49:79:9C:6A:07:C3:65:DB
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9b:58:79:3c:ea:2e:71:99:08:df:34:99:05:90:bd:2d:52:
f4:79:6b:6b:d6:6a:89:3d:03:d5:f1:41:cc:ff:07:15:4e:17:
26:ab:e4:e4:e6:39:e5:13:a4:3a:b6:58:80:e2:d2:3f:0b:22:
ec:c3:8f:50:40:1c:07:ed:3b:ed:a1:b7:93:98:76:9b:fa:bd:
29:13:62:86:6c:b8:fe:4c:d0:4c:e0:ee:ee:f1:bf:34:fc:c1:
bd:22:5e:a2:66:97:66:29:d1:6a:ac:77:e4:ac:98:85:b3:a4:
ca:23:5d:ee:64:28:ee:11:51:07:26:c7:9b:0d:39:b4:c8:fe:
97:0f:56:e1:7e:e1:17:fe:35:08:0f:71:f3:2d:63:68:92:79:
c7:c7:48:04:c0:93:44:48:8e:28:84:c5:12:65:f5:98:c5:aa:
9b:f7:5e:6a:c9:6d:95:08:fc:80:b4:ab:56:bf:85:75:6c:cf:
bd:36:1e:24:a3:af:1f:ae:65:8a:2f:f4:f3:47:02:9f:18:ce:
31:7d:18:45:1d:b9:f1:6d:f4:f9:60:cc:2b:18:3f:75:28:ef:
a3:bb:8a:e8:3a:e6:f4:e7:89:df:d9:83:b6:3a:57:a6:b7:0e:
f7:fd:29:d2:46:74:27:a8:c3:d1:37:fc:07:de:56:08:81:5a:
ca:f5:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:53 2025 by rpki-client