Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: NK+8y8FF/2cXoxVy+ZNLYSIIhOfc3vSsjTI9IvN2jDs=
Subject key identifier: 93:B6:B4:93:BA:D4:51:77:73:39:44:4B:13:88:34:44:DD:05:52:D7
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 0197C048ECA39AF21448CD4095FD380C3261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 12BC
Signing time: Mon 30 Jun 2025 10:01:33 +0000
Manifest this update: Mon 30 Jun 2025 10:01:33 +0000
Manifest next update: Tue 01 Jul 2025 10:01:33 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: yApQxTyhr0VRkcZgPOanKPCAWZ66s3L4wtVvhfUzRZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:ec:a3:9a:f2:14:48:cd:40:95:fd:38:0c:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jun 30 10:01:33 2025 GMT
Not After : Jul 1 10:01:33 2025 GMT
Subject: CN=93b6b493bad451777339444b13883444dd0552d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:ad:57:0c:3f:89:c4:e1:d6:7c:5d:7f:d6:
9a:dc:54:37:83:e4:60:d9:f3:5c:39:50:9c:8b:45:
ce:33:15:53:d3:2b:b8:bc:93:3c:2b:d4:47:b0:16:
97:02:44:ab:08:d8:ef:e4:33:bc:2e:0f:01:f7:83:
ee:e1:d0:8e:08:f4:4e:ee:09:ca:bf:2b:13:f5:69:
08:f6:6a:71:3b:42:10:01:87:db:b6:20:4a:cf:81:
26:2e:fa:92:ba:2c:9a:80:6a:27:73:de:92:df:9d:
25:9d:cc:b0:11:8d:64:db:01:bc:8a:a7:11:35:6f:
8f:b9:d9:67:42:c8:76:ca:75:21:16:c0:f5:93:f5:
9f:16:70:25:03:05:12:65:21:69:88:08:8c:33:98:
66:06:e5:e0:c6:e4:6d:e5:3a:9f:1b:58:71:b5:c8:
71:40:b8:cc:ed:54:7d:d4:02:6c:71:0e:fb:7b:59:
60:1f:d0:54:bf:51:66:7f:83:e6:af:13:78:a4:5b:
05:07:31:80:ed:42:69:8e:ff:25:db:aa:95:44:e8:
da:98:71:fb:32:7e:d1:a4:d8:15:dd:da:2a:55:b3:
8b:86:4c:ac:a6:36:7f:e1:f5:cf:5e:ef:e5:c5:66:
92:55:e2:f5:e2:ad:02:43:cb:0b:a1:4c:e3:8e:a2:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:B4:93:BA:D4:51:77:73:39:44:4B:13:88:34:44:DD:05:52:D7
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:01:cd:cf:9d:d5:40:e1:01:da:0e:94:af:49:d0:77:b6:cc:
2d:93:98:70:d4:70:83:1b:95:5c:b4:8c:05:f0:2e:3e:1e:e4:
0e:37:3a:5c:ef:41:09:f1:8f:cd:5a:62:7a:4b:aa:8b:7d:db:
e6:8b:f2:5d:53:ef:87:55:c4:c0:b4:df:67:e1:ad:8f:1b:dc:
aa:cc:22:d0:f5:d3:7c:27:8e:22:72:5a:31:de:8f:69:57:7c:
ff:c2:ce:f7:5a:d8:d3:83:88:25:55:15:ae:10:1b:7d:7e:b2:
a4:ea:64:48:97:e4:53:60:e7:a0:bf:fe:4e:2a:c4:d7:2d:b4:
6b:a2:18:00:18:97:b5:b9:66:bd:79:1b:d8:76:1f:5e:5b:96:
d2:da:94:d4:24:98:98:a9:5e:56:9e:b0:a8:30:8b:46:7a:7e:
ac:50:39:9a:c9:59:0e:f3:20:a3:89:a8:8e:4d:8d:6d:55:62:
f9:e2:f4:f6:29:13:fc:91:a4:86:a7:f7:41:61:20:29:e4:8e:
51:fb:e7:23:c0:c8:06:0d:b0:ab:2d:d0:ed:7d:cc:ba:de:e8:
d6:c4:0f:1a:cb:93:03:2a:d1:b6:f3:76:76:40:19:1f:c3:9d:
61:55:bf:62:17:0b:9b:b3:bf:58:d8:42:5b:68:10:17:b0:09:
dc:b8:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:19:25 2025 by rpki-client