Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: lJguHwu0IdEjrgEAecciWXWtQdJJxYatY4LfvO+hQ/4=
Subject key identifier: 20:A7:16:3D:44:60:A9:50:E9:32:77:B2:D9:9F:84:8D:85:DA:75:F9
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 0197B7EA751078252A781802764C6CF12F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: XeWuCJPHL5Dc+kQLTKH87bOYxUHA0Ktrp20wKoUAv60=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:10:78:25:2a:78:18:02:76:4c:6c:f1:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=20a7163d4460a950e93277b2d99f848d85da75f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:1f:9d:76:c7:be:d1:17:66:bf:cc:e1:03:
e3:cd:79:ec:3e:cd:12:35:86:26:1d:2a:6e:46:ad:
13:37:dc:d8:75:17:b0:aa:fc:66:48:89:2c:e2:8e:
36:0e:21:8b:7d:42:22:5d:67:55:00:5d:99:83:ca:
bc:c9:54:e4:25:58:23:44:1d:c9:c9:46:9f:1e:3e:
7d:14:82:cb:fd:70:bc:c3:03:9c:42:c1:6f:a2:f6:
9b:65:dd:03:7e:b5:9a:93:e5:74:08:42:a5:77:b4:
4a:19:b9:2a:34:07:36:5a:aa:64:bc:3e:50:5e:4e:
45:9f:80:c5:7b:09:f3:c0:c2:6f:38:0e:a7:02:c9:
37:7c:be:a7:15:ec:f7:e2:04:b8:f0:c5:3b:b2:27:
eb:71:7d:0e:09:51:15:44:fe:3b:c9:b7:53:23:b5:
7d:6d:f0:cb:0d:14:77:08:0c:fe:a8:24:d2:08:c5:
cf:d8:5d:f6:2a:8b:16:ba:bf:a5:3f:b7:e6:68:66:
2d:2c:4b:37:f8:2c:fb:2a:d9:3e:9a:df:60:dc:d0:
2a:c2:43:eb:d3:e3:0b:a8:b8:d0:4e:1d:24:ce:90:
fd:c1:82:09:24:78:37:21:82:fd:80:56:3d:ac:fb:
2c:56:86:09:e2:d3:ea:54:d0:f4:d8:1d:bf:c6:b2:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:16:3D:44:60:A9:50:E9:32:77:B2:D9:9F:84:8D:85:DA:75:F9
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:02:d3:5a:a9:12:00:7e:b7:bc:0e:93:e6:ca:b7:3f:23:4e:
69:54:02:2d:07:8a:c0:bd:a4:b3:b0:10:3e:f9:a0:89:6b:7e:
5d:99:f1:2a:63:25:3b:d3:b9:4c:7b:c2:08:e2:2e:76:67:28:
66:a4:0a:2a:3c:9a:82:56:0d:0b:f5:33:08:85:3a:a3:e2:8a:
61:78:67:ca:34:f3:02:81:07:30:62:88:b3:11:45:f0:be:07:
3e:44:79:86:96:f9:f5:3a:ef:78:f3:5d:af:aa:2c:84:c8:60:
a2:d5:9f:a6:a1:35:4d:9b:d4:7c:a0:54:31:1b:b4:b3:82:3f:
dc:8c:f2:61:b1:78:b8:5b:92:2b:4a:cb:1b:84:d2:cd:4e:38:
c5:c2:37:c7:43:47:0d:f3:7b:50:f2:27:1e:64:cd:a0:59:72:
26:42:39:66:f3:12:c1:12:02:74:44:5d:d4:3d:f1:ef:b5:16:
56:fd:1e:2f:11:23:e9:c5:06:27:49:81:bd:7b:0e:e0:58:ab:
3a:2c:a7:9f:58:c7:5b:4b:a3:3b:58:d6:eb:89:3e:18:1c:ab:
ef:09:68:e0:40:98:77:65:b1:09:78:a9:4c:6b:f0:df:ad:a4:
97:95:c7:f8:15:80:e2:70:b4:18:de:01:ab:8c:65:01:df:7a:
f2:1e:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:25 2025 by rpki-client