Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: J9sIuPU7DK12evSK+AluxYa7FOR2pCLK1JTvOudCZJY=
Subject key identifier: 18:88:F1:CD:6B:C7:12:6E:82:AF:4D:52:6C:62:3E:8A:26:CA:1D:6F
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 0197B6A03C81C7E9E0F078E38260E9BE2AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: czlspAtcvGnM4YlZL5K6osfBXZ8MerY9a8CNB3ZWNzY=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3c:81:c7:e9:e0:f0:78:e3:82:60:e9:be:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=1888f1cd6bc7126e82af4d526c623e8a26ca1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:82:fd:9b:58:d1:50:4f:4f:56:2e:dd:69:
3b:96:99:7e:38:56:7d:03:71:e0:3d:5e:91:b8:54:
d7:4e:7c:51:c2:e6:2f:56:00:8a:69:72:c7:47:70:
d3:ed:2b:3a:76:eb:a4:63:53:85:cb:e3:95:9f:c5:
05:84:bf:9b:97:d1:f0:fd:2d:77:93:82:9d:de:bb:
94:3e:2c:a3:65:1b:1e:b1:cc:04:51:fc:15:0f:14:
b7:a7:78:9b:14:cf:b9:0d:23:8d:4d:de:f2:59:2f:
7d:07:43:88:88:ce:7f:71:63:05:3b:2f:62:79:0f:
cf:a5:e9:e2:c7:86:9f:61:f5:0d:56:ce:95:31:84:
b7:9e:69:8e:97:a2:bc:a4:6b:c0:f7:7c:cd:50:d0:
11:d5:e7:9c:bc:31:a9:a3:d3:99:70:9f:4f:a5:96:
83:57:16:9e:97:02:0b:c1:f9:50:8c:18:89:31:13:
7d:98:8e:61:6e:be:04:e4:82:64:e1:06:57:1f:ef:
cf:6c:8e:65:12:76:43:e3:b1:db:ac:dd:1e:12:93:
92:44:fa:db:1a:30:c2:44:ae:52:7c:ff:e2:a3:6e:
3c:98:19:4f:1b:cc:c4:cc:92:b7:cd:91:58:de:ac:
a8:a6:2c:2f:97:92:c5:39:ce:d3:a1:cd:d6:c6:c3:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:F1:CD:6B:C7:12:6E:82:AF:4D:52:6C:62:3E:8A:26:CA:1D:6F
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:07:d2:38:50:c5:df:2f:47:b3:56:68:44:80:4b:b6:3d:
98:1d:33:24:30:c6:3d:42:80:8d:fe:30:52:cf:d2:6f:09:77:
4f:d9:2e:af:2f:9d:ee:49:4f:4e:46:db:dc:01:03:91:d4:d2:
10:26:03:71:6e:c4:35:c2:87:d3:04:1b:02:f1:9a:86:0f:8a:
56:eb:cd:f2:36:12:13:ff:5b:2c:10:4f:61:3b:bc:1d:d8:28:
5d:24:02:1f:9b:5c:63:f8:91:82:01:5c:1f:10:ff:9f:b4:e7:
48:b8:52:f6:6b:66:5a:1f:7c:cd:39:f0:d2:68:62:da:be:e7:
ba:ce:e9:27:b9:34:c3:db:fe:af:0f:5e:1d:af:85:3d:de:5d:
39:f4:8e:24:f4:7b:9a:4b:55:64:90:e4:97:2e:c2:a6:40:9a:
b4:9d:a6:f4:c9:40:93:75:a2:4f:be:61:be:7f:1c:c4:56:26:
95:7b:f8:47:1f:1d:e5:7d:91:a4:f6:a3:f0:a2:73:a3:44:dc:
d7:e7:5b:09:69:8c:b7:78:08:96:57:d9:d3:8f:82:bb:b6:f2:
f9:9c:d1:b2:c6:bc:e5:42:dc:15:be:dd:65:52:e1:cd:29:54:
c5:6b:10:e7:a9:f6:33:96:a1:3e:2c:f8:9d:f3:23:f9:00:a3:
1f:cc:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:28 2025 by rpki-client