Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: TyAKMjCe6oBNXoBrMljOoVHqgAzMNWSL1poSkykN3yQ=
Subject key identifier: 3A:FB:CF:E8:05:2E:A6:23:F1:3C:66:90:0B:00:FC:D6:C4:04:78:74
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 0197B6A0F31EA494C29F70082AF333C74316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1577
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: XPs3s3ACBec2vpdEhWiG3ywIX1CqiJEXId9OKeug7yA=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f3:1e:a4:94:c2:9f:70:08:2a:f3:33:c7:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=3afbcfe8052ea623f13c66900b00fcd6c4047874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:2c:70:74:02:30:38:99:a0:08:4f:36:7e:
b0:4a:f5:ac:5e:20:43:60:7a:0d:ab:f6:60:a8:ec:
3a:38:98:69:13:0c:5a:57:1a:8f:68:ac:9f:cd:76:
c9:b0:74:cd:46:6d:65:be:3f:be:02:ad:07:05:b6:
5b:da:37:48:b3:c7:ea:7b:d4:fb:84:37:be:91:02:
c0:4d:7f:ac:6d:0c:ab:e2:03:6e:37:1b:1e:a7:c6:
17:11:37:48:a8:d3:13:87:65:90:a7:f2:18:77:cf:
4d:11:7f:37:99:1d:e8:e3:6a:73:16:8c:8d:07:26:
e7:38:3c:22:3a:3b:bd:17:6c:d0:fe:fd:7a:c1:c1:
7f:06:99:64:4e:81:5f:f0:56:5b:ae:00:ee:15:4c:
6d:5c:d4:9a:bc:91:68:d0:7e:92:00:cc:ce:a0:b8:
16:2d:fb:ac:b0:88:b2:db:d1:cb:c0:d9:31:3c:f2:
20:20:26:99:28:0c:0a:9b:56:fd:3e:d1:5a:84:0b:
02:90:f8:25:ba:fe:48:b8:60:93:ba:ce:44:ab:18:
0e:1e:6e:ca:96:50:40:bd:11:ba:be:89:cd:4b:15:
5d:d0:96:53:7b:40:01:e8:97:9c:86:c0:16:c5:ac:
97:20:78:19:5a:76:c8:f1:41:73:7c:ab:09:c9:1f:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:CF:E8:05:2E:A6:23:F1:3C:66:90:0B:00:FC:D6:C4:04:78:74
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:5d:39:71:d0:f6:2f:2c:ab:53:d8:71:7f:aa:ee:35:09:
8a:55:44:ec:8f:19:c3:eb:bf:00:dd:fe:98:be:80:21:bc:94:
a8:33:5b:cc:74:b6:52:12:36:b0:00:6e:3c:87:77:a8:1d:c4:
17:6a:4a:fa:c0:0f:aa:80:31:8c:88:d1:9d:fc:04:3b:21:d4:
1e:5d:41:e3:78:e0:cc:53:94:ce:2c:76:0e:34:a6:d5:f9:6e:
38:33:23:df:74:c5:65:60:4e:e8:81:72:0d:3d:5e:6e:11:ca:
00:b3:6e:54:60:9e:00:eb:21:fd:b2:6c:a3:f7:27:be:e2:56:
17:90:3c:3e:44:e8:24:23:2f:4a:50:ea:28:e6:8d:1b:4d:5b:
e7:8e:89:28:03:b8:d8:0c:34:1c:40:79:fa:07:f5:23:b4:3e:
74:68:86:b6:a7:8f:bc:24:c9:5f:7a:ef:ae:50:cc:64:7d:d5:
98:80:95:4c:17:2a:0e:3a:dd:5c:5c:16:fe:3c:0f:df:fe:8f:
ff:23:1f:14:92:c9:8a:b9:71:34:a3:48:f1:a0:60:74:bc:de:
c5:6c:2c:ab:9a:65:6b:12:65:71:a6:75:ff:40:f8:05:82:c0:
cf:b9:6e:ab:2b:97:03:56:21:8f:1c:b1:1b:67:80:24:c7:5e:
aa:7b:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:47 2025 by rpki-client