Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: 6uhZR3lpnbSsfgHNCfDbIi+e+bTFEZewzgpHsfBLqZ0=
Subject key identifier: 90:EA:ED:50:FA:71:8A:7F:95:FB:E2:31:8C:9C:3C:39:03:66:72:5C
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0197B6A17A838BAC04A5BC8741509888C813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 014F
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 3yzs4cAU17v1B7Q2wSAWJfsAcKOpPyJXK9/Ui+7vRXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7a:83:8b:ac:04:a5:bc:87:41:50:98:88:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=90eaed50fa718a7f95fbe2318c9c3c390366725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:44:57:2b:9a:f5:b2:da:3d:a2:d0:8f:49:
7a:0e:28:be:3d:9b:d0:51:5e:08:d1:fe:54:c7:27:
a3:55:91:08:bf:c2:72:9b:08:e7:75:c1:ca:36:95:
60:ee:e7:56:02:df:90:2f:f5:b5:47:4b:b1:82:8b:
10:30:13:98:bf:67:b3:34:b3:86:9a:50:6e:d4:60:
38:a9:c1:75:e3:0a:a2:83:63:74:99:cc:14:c2:39:
d5:06:13:7c:d4:ba:40:d6:ed:c7:85:48:c1:d0:b8:
e3:9b:29:90:e5:39:d7:22:65:bd:bb:55:a4:eb:8e:
ca:ff:86:1a:54:c9:e5:a0:ff:e4:7b:87:ad:98:69:
74:38:1b:86:2f:5e:49:25:31:fd:24:66:c9:33:bf:
47:c0:2e:aa:8c:cb:19:5c:ec:e3:0a:2d:8e:44:b4:
7a:49:5a:51:48:19:ba:49:57:10:c0:73:e3:bd:d9:
c9:a4:10:63:32:94:c5:91:c3:f6:c9:12:63:10:ee:
42:0a:77:27:ee:91:e7:a2:b5:dd:92:36:8a:5c:26:
05:92:a7:30:81:e5:9d:c5:89:27:b6:7f:cd:0e:fb:
15:a0:03:df:59:d0:4e:7d:f1:60:45:a7:36:68:86:
03:cc:3b:0e:83:b1:4d:f1:81:8e:48:e3:6a:8c:d4:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:ED:50:FA:71:8A:7F:95:FB:E2:31:8C:9C:3C:39:03:66:72:5C
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0c:f4:bf:1d:e7:e9:b5:1e:8e:6f:ca:d9:e1:65:78:94:10:
0f:d8:1a:7f:90:90:b7:9d:2c:33:11:93:10:b6:53:f7:bd:fe:
1e:6f:61:f2:2c:52:4e:59:87:36:cf:07:30:0b:96:4c:38:97:
b9:7e:9b:cd:4d:59:88:45:c6:a0:fa:62:03:34:c8:f8:38:42:
15:fb:d2:98:2c:4f:0a:92:86:8e:ca:c6:47:bd:af:18:3e:1e:
e7:b2:f3:f0:16:25:5b:30:6f:c6:ee:c0:08:10:96:08:a1:2c:
92:41:64:be:03:40:01:f3:9b:26:7f:d2:87:8b:dc:59:6c:b8:
32:91:fc:77:66:b0:29:52:4d:93:bf:01:bd:12:5c:30:03:57:
16:4e:1c:93:7a:fc:f3:0b:a2:86:e6:75:67:20:0c:0a:ad:ad:
b7:bc:8b:a5:00:fa:92:e1:90:f9:69:68:e5:5d:95:cf:e9:c9:
c4:a8:f9:ac:de:3a:98:78:c8:eb:48:00:5a:c5:ea:58:89:c2:
36:a5:5b:81:4d:51:5b:5d:d5:c8:92:9d:23:50:88:01:89:43:
0f:ff:86:12:eb:51:aa:13:4a:60:bd:0a:e2:4b:b6:51:dd:b0:
9d:ea:3a:0d:16:92:d3:81:9d:95:f3:2b:66:43:56:5a:1a:c9:
dc:1f:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:23 2025 by rpki-client