Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: slyhRH4g9X/k3dx0xjlNQQHS2VfZ5QaEZOXf9xPoMEc=
Subject key identifier: AF:75:5E:4C:AE:30:7D:3E:AC:F3:2B:47:32:DB:2F:AE:A5:B9:2E:E2
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0197B745691600380E885D0352B7F439A451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: e/hn4n9W+5psmjCD02x8xCYxVojEEoajILya74h3rqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:16:00:38:0e:88:5d:03:52:b7:f4:39:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=af755e4cae307d3eacf32b4732db2faea5b92ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:62:0e:17:c4:00:35:66:ec:25:f7:b4:75:
9c:ed:c9:39:5d:1a:d7:5a:84:6e:52:cb:be:b7:f5:
31:25:0d:3d:d2:4f:f8:8f:66:2e:b3:4b:5e:e3:08:
e4:2d:2d:4a:bc:df:90:2b:3f:3f:d6:17:90:21:32:
23:1c:5d:68:30:d6:64:2c:ad:75:dc:f1:4e:fa:f5:
d1:a2:21:17:eb:9a:6d:6c:40:af:aa:2d:d0:af:ce:
18:e7:1e:9a:26:7c:8b:4a:32:f7:46:e5:cc:f5:24:
d0:6f:86:d5:14:ab:0f:c4:07:58:c4:5d:a0:18:00:
7c:67:40:de:11:96:b9:dc:99:01:10:74:49:be:03:
7e:f3:3e:68:9f:72:42:8e:75:0c:49:4c:e3:39:d1:
4a:ee:6a:92:68:0d:0b:aa:3f:1d:ea:d8:78:50:4e:
a7:a0:33:f5:f0:5a:db:a5:28:33:c6:e2:50:27:4d:
cc:3e:9b:26:d8:37:94:50:be:47:99:f1:bf:26:a2:
de:92:a7:5e:54:6a:ad:64:1f:98:02:c8:e7:95:a3:
b0:c6:4d:e8:15:e3:d4:96:9b:6a:22:4b:c5:bd:79:
ab:9e:b3:ae:02:31:3f:e9:79:0d:fc:64:9f:11:30:
5c:c3:f6:6a:9f:9e:f7:72:b7:9e:d7:12:ea:2a:44:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:5E:4C:AE:30:7D:3E:AC:F3:2B:47:32:DB:2F:AE:A5:B9:2E:E2
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:98:05:1f:1d:93:cd:34:1f:d7:10:4b:c6:20:d6:c7:c7:
34:16:8f:5a:86:bb:a0:83:0a:cf:73:cc:c5:50:11:4b:a5:24:
a4:c9:6d:c2:ab:61:d7:de:45:95:5d:d1:39:ab:f1:93:27:bf:
de:a4:ad:66:af:68:0d:64:9c:ab:8a:08:3e:23:51:f0:7c:83:
4b:b6:6f:b9:5f:1e:f0:56:44:6e:43:77:5c:2c:42:4a:f1:cf:
97:75:d4:c1:0c:15:c1:8c:dc:25:b8:03:24:99:26:64:00:01:
90:96:b2:d1:3f:b9:9c:a5:1b:a5:09:42:1a:bc:af:65:05:84:
da:5e:b5:29:ad:38:30:d9:62:5c:0c:b1:73:7f:2c:40:d8:4e:
50:87:99:ed:51:bb:e2:ab:90:93:cc:30:c0:d4:99:05:94:3c:
c5:6d:b2:c3:a9:39:18:49:33:83:8c:ab:38:ef:e3:5e:82:10:
63:26:26:ba:85:15:bb:2f:1d:6b:0a:d9:df:06:f1:4b:41:9e:
20:be:16:13:59:be:44:09:24:43:67:4f:a8:7d:7c:e2:59:52:
85:44:31:78:c9:42:1b:2b:b5:bf:8f:b6:f7:b9:ee:7f:ab:fe:
c5:8e:c3:32:00:32:c1:1a:3b:9d:e6:5c:32:d4:8a:a7:96:66:
9d:c3:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:34 2025 by rpki-client