Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 4VnCCfHMHJU2XN2xZ0ULqdmklNARy/QGucVz1I2i9ow=
Subject key identifier: 22:F5:1B:26:A3:E4:45:C1:27:76:0A:0F:6E:3C:9E:49:E9:B9:B0:08
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0197B9D8E4DF193EE731D1CA479F6181D68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 04:01:28 +0000
Manifest this update: Sun 29 Jun 2025 04:01:28 +0000
Manifest next update: Mon 30 Jun 2025 04:01:28 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: B/Y3y7Ia7jtMKbOLkKZzUfLhHP2mSPhBIMMqMHyPIpI=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e4:df:19:3e:e7:31:d1:ca:47:9f:61:81:d6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jun 29 04:01:28 2025 GMT
Not After : Jun 30 04:01:28 2025 GMT
Subject: CN=22f51b26a3e445c127760a0f6e3c9e49e9b9b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:54:ca:19:28:77:a7:20:23:e5:e0:14:99:
10:06:04:58:4e:ef:01:01:72:1a:47:ff:d1:ef:9e:
e3:94:96:7d:03:24:ca:d8:3e:72:cd:00:a4:95:23:
09:cb:11:31:74:92:2b:f6:56:b8:24:18:e5:99:f8:
e4:1d:e5:25:91:26:fc:42:6b:9a:c9:49:54:0d:e0:
9e:3a:7e:70:49:96:fc:0c:93:07:68:09:2d:cc:82:
40:06:dd:96:92:83:ea:d0:4c:34:e1:08:ea:1a:bb:
d1:19:3c:c9:e2:26:52:45:6f:1e:57:33:8b:22:cc:
99:45:07:9d:ba:d6:15:51:e0:62:a7:c9:9e:9a:5a:
df:f1:5d:2a:92:68:89:2d:79:f7:6a:82:c9:3c:55:
65:c4:96:6e:ef:55:42:ab:35:e9:4a:4a:aa:1b:34:
df:cd:6b:40:16:4a:0c:08:be:72:68:1c:a6:e8:89:
2a:73:9d:33:5d:01:84:d0:d8:af:78:e0:11:b0:a5:
d4:95:7c:af:b9:b0:16:30:5b:60:12:db:31:09:56:
0d:1b:bd:72:a9:18:4b:8a:84:df:a2:92:af:5b:0a:
df:27:50:dc:d8:ff:3f:aa:b5:54:73:d3:37:07:17:
e5:95:81:3a:56:64:8c:50:da:ce:3b:95:fe:b1:77:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:1B:26:A3:E4:45:C1:27:76:0A:0F:6E:3C:9E:49:E9:B9:B0:08
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:8e:de:47:21:de:db:e7:3c:5f:97:65:7d:8d:dd:7a:a6:
2e:75:55:25:7b:fa:46:59:ca:cf:6f:dc:d2:a3:6f:30:e8:b4:
9e:fe:38:35:5f:c5:0a:04:07:b4:c7:10:21:02:e9:04:35:d8:
11:b0:ac:61:98:d5:52:6a:8d:09:36:d3:98:24:80:16:b2:e7:
b7:b2:17:12:ff:99:9c:08:c7:99:ad:83:93:ae:af:d5:24:74:
12:b2:f7:9c:55:77:d3:f4:92:b6:11:f5:e6:b0:2e:03:c8:18:
b7:9c:9c:8f:1e:aa:75:01:7b:b2:0a:2e:d2:69:e5:89:95:50:
47:ed:28:e3:e9:b9:e6:f6:11:c4:9a:b4:74:98:6a:70:bf:3b:
3d:9e:17:bc:a2:71:00:39:82:87:c2:4b:6c:b6:62:f4:ef:c6:
54:74:37:cd:f2:f1:28:40:43:c5:d7:bf:6e:0c:13:f4:b0:83:
ac:46:4c:9a:8a:01:65:7a:32:2f:e5:68:4f:af:da:ae:78:3a:
4f:d2:b9:99:44:fb:d2:c3:b2:4f:f3:ec:82:79:70:ef:24:9e:
bd:25:e6:9a:6e:df:88:ee:a5:6a:d7:14:ba:77:81:db:6d:26:
ed:af:8c:db:85:56:57:98:e9:6a:40:ab:55:16:a6:0c:6d:1d:
da:84:08:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:47 2025 by rpki-client