Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: rcLNmNzmBvJFlFyR2qmhc9d+mZG8wJ7bMVbV0iwmuJY=
Subject key identifier: 1E:3F:75:2A:43:8E:EA:95:FB:44:1D:80:98:7E:B7:BB:84:76:45:E1
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0197B7EA9744AC7011836079C065A826532D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: 4kNldZIgptCds0Z+3aIpEVWwF5FLECln92+pIIKaIds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:97:44:ac:70:11:83:60:79:c0:65:a8:26:53:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=1e3f752a438eea95fb441d80987eb7bb847645e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:4d:1b:2c:bc:f4:d1:dd:42:9e:b5:b3:e7:
70:e2:e3:9f:fc:69:a9:0f:94:8c:05:ad:19:6b:00:
82:ee:1b:b0:13:c6:c9:73:4c:84:8f:f6:2a:d7:6c:
c1:12:e5:f3:61:69:42:c1:12:4d:c9:db:06:d6:69:
a4:9d:eb:d3:02:17:87:e4:97:de:fc:df:e0:e2:7d:
2d:aa:ed:2c:b8:07:16:3f:15:97:2d:52:0a:e7:27:
09:9f:9f:cf:ea:68:18:f7:47:c5:1a:0e:f9:10:97:
90:3f:02:37:a7:2e:d1:18:3d:3a:f6:ea:ff:91:c0:
3c:5b:ff:0a:20:5d:37:23:30:18:d9:fa:f4:84:92:
78:33:ba:6b:89:b8:1f:ef:3b:de:44:53:58:7b:98:
11:6a:84:36:38:da:f6:ff:b4:2c:3d:ec:86:b6:47:
4b:f0:d3:1d:5b:7c:ad:ed:b2:19:0c:3e:12:27:66:
05:5e:82:47:5f:d6:b0:88:46:34:c4:e0:a8:c4:ff:
21:ab:69:55:5e:8f:c2:36:4a:aa:0b:94:68:f5:4b:
72:d8:cc:94:9e:64:62:6e:13:07:ce:a9:a7:d5:c6:
0c:c0:41:bc:01:39:8e:81:1b:1b:a7:a0:c3:8c:4e:
9d:fa:51:65:f5:5c:e6:20:7f:d8:18:51:b6:aa:3f:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3F:75:2A:43:8E:EA:95:FB:44:1D:80:98:7E:B7:BB:84:76:45:E1
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:6e:d0:02:2d:d5:d6:7a:28:bb:8e:81:a6:fa:7b:bb:ea:
48:c0:b8:00:3d:4a:60:86:df:ff:ca:9d:69:ee:ca:2a:97:e0:
68:4a:c3:a4:a8:87:04:60:99:08:73:5f:36:5e:b6:76:57:cb:
ac:bd:dd:33:34:e4:32:51:a6:7d:68:ae:0d:b1:e8:a6:d2:15:
f4:46:82:a9:0d:a7:a2:bd:5d:48:f6:f8:2d:a7:1e:31:31:d0:
11:f3:f4:60:fc:c7:ec:1c:05:62:a1:63:d6:f1:35:86:52:f5:
fe:36:bf:22:7d:e6:aa:f4:47:c2:3c:88:44:78:cf:47:df:38:
c1:32:1b:70:31:2b:0f:46:42:b2:58:41:94:4e:55:3d:dd:91:
5e:f1:a3:31:99:51:8d:05:41:0d:59:be:9c:ac:48:f9:70:c1:
02:a6:c9:ba:ba:99:12:2e:81:11:7d:44:b8:b3:3f:44:f4:f2:
06:5e:88:3f:b6:5e:3e:ec:e7:78:19:e7:9c:4e:56:02:88:40:
1c:7a:f7:d5:72:03:5e:55:70:ec:83:fe:45:73:4e:57:49:bc:
bf:39:5e:e7:7c:d8:11:47:91:8f:ad:d2:bc:4c:9d:50:36:a0:
6a:aa:64:09:c6:1e:b7:dd:37:c1:84:18:e7:de:f5:90:5f:0f:
57:f7:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:54 2025 by rpki-client