Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: 77XkYU4zWjAYoM0XS1oWSBw1JcqtWSw+ww7ASy80EBE=
Subject key identifier: BC:DB:37:22:AC:27:F9:5C:91:B1:A4:E9:1B:9B:F5:75:94:03:95:7D
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 0197C3B70DE0A7FA7B534E4A9FFD8C2D2FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 124A
Signing time: Tue 01 Jul 2025 02:00:43 +0000
Manifest this update: Tue 01 Jul 2025 02:00:43 +0000
Manifest next update: Wed 02 Jul 2025 02:00:43 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: 8yCl1SOh00Ju5ZSAuTi9ZG95Xyf29BHTzN8fvG5oh1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:0d:e0:a7:fa:7b:53:4e:4a:9f:fd:8c:2d:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Jul 1 02:00:43 2025 GMT
Not After : Jul 2 02:00:43 2025 GMT
Subject: CN=bcdb3722ac27f95c91b1a4e91b9bf5759403957d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:92:c2:9d:08:75:33:d6:0c:d6:be:b4:a2:
2f:93:f6:25:2f:e9:af:f5:c3:75:2c:d7:c7:4c:06:
1c:50:40:b4:ce:72:96:71:da:c3:42:2b:c4:55:38:
82:99:33:60:03:d3:26:85:bc:a1:ea:52:61:80:f0:
40:39:f3:81:71:ee:e7:d5:54:ca:89:0f:bf:ba:e7:
c8:71:53:3c:0f:e3:17:14:e9:be:5c:a9:58:09:53:
d9:3c:85:d8:fc:76:20:f0:5a:38:96:6b:1c:fe:f2:
bb:e3:fa:e8:71:08:9b:5e:94:a3:b3:da:e9:13:27:
72:c1:c3:cd:aa:e0:57:11:05:1d:d2:6a:96:53:18:
99:f1:04:ec:ef:72:2f:3e:46:64:52:49:70:36:12:
82:f0:fc:68:e5:6c:ca:35:84:39:b5:44:51:de:64:
b3:3b:8a:c6:ad:e9:ce:a2:01:e3:c5:b0:ac:38:74:
e5:8b:56:ac:02:13:78:bd:c0:46:c4:41:c0:cd:c0:
c1:4a:05:79:c4:16:82:ba:ba:ca:65:3b:98:81:ef:
75:2d:86:19:43:5c:b4:be:43:20:b7:3e:01:88:f4:
84:64:1e:60:ea:ca:db:25:3f:43:37:5f:d1:96:07:
e0:e0:cd:dc:db:24:fa:b5:ff:46:e8:c8:7e:91:b2:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:37:22:AC:27:F9:5C:91:B1:A4:E9:1B:9B:F5:75:94:03:95:7D
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b1:63:5d:31:43:a7:6a:33:bb:23:c3:e5:f6:f5:93:a7:73:
81:7e:7e:f7:a5:0e:b9:05:f9:36:b4:bd:c6:d1:d9:34:36:a0:
c2:09:12:7c:85:3b:5e:14:42:6f:17:3a:cf:bd:de:3a:ab:8d:
aa:15:db:4d:c0:a9:91:54:73:6f:8b:d0:42:1f:19:8c:a2:65:
83:c7:08:77:57:b0:d9:e4:ac:06:52:cc:1b:4e:d5:d3:2c:28:
9f:b9:e2:cf:40:23:66:9f:01:86:91:18:e4:e4:0a:79:09:b9:
41:73:93:40:de:39:f7:e8:7c:b1:b5:d8:2d:e9:bb:28:ae:fa:
1e:a4:ef:12:0d:15:26:79:5d:a5:99:48:32:2d:d9:4e:59:8d:
fd:c2:eb:7a:4b:11:ed:b6:38:15:59:1f:dc:a9:6c:8d:49:ec:
eb:bd:f9:bc:3b:8a:9b:d7:1a:ed:db:17:d5:8d:cd:09:ff:44:
46:36:1c:43:42:90:85:98:85:8f:f6:89:f5:ce:7b:06:0b:c1:
67:18:75:07:63:0d:a0:67:1e:f9:c3:f2:ae:77:0b:1a:97:4e:
46:70:89:b7:a2:2c:80:82:d8:4a:7e:de:32:fd:6d:42:56:d1:
ae:e7:ae:77:86:59:4a:b2:76:0c:f3:ef:a0:53:02:8a:6a:7b:
be:d6:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:10:50 2025 by rpki-client