Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: MgQf3U0FWnHHSlDozTdijhW+1dMnLEaAtm2A4kADyzM=
Subject key identifier: 63:0A:07:EA:02:B8:66:81:82:27:94:DE:05:B6:75:D2:41:05:36:3E
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 0197B6A248E401364D8C47D35A6C7AC5811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: owVxJdDo4a2pmlR2l1/aWAn+W4NFObvsf3FLLLim/cA=)
2: y4nRX2MR29nhRNB-8qKuPT5GKso.roa (hash: KPjY3F6wNY99Qei7P9FnZL2mNKxujn8hAQHxPf7AHds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:48:e4:01:36:4d:8c:47:d3:5a:6c:7a:c5:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=630a07ea02b86681822794de05b675d24105363e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:e0:31:d6:3f:f7:79:44:a4:56:17:f2:a5:
c5:0d:8a:1b:d6:9e:bf:90:4e:b9:52:fb:0c:d2:8b:
17:58:7a:86:31:bf:d9:e1:92:de:05:4a:d8:14:c6:
79:3d:d2:84:0e:26:6a:52:02:e1:20:1a:39:c4:27:
14:e4:db:10:a3:dd:e7:47:78:36:f2:cd:56:6c:e5:
cd:df:7c:5a:61:f0:9f:72:bb:f8:92:72:f3:fe:1d:
1a:89:69:64:28:9b:36:58:25:9c:48:97:80:3f:8c:
5b:2c:9c:ef:85:cb:c5:0c:09:8c:be:c7:61:50:4d:
21:d2:03:2c:67:76:99:e5:7b:56:5a:a6:9b:49:96:
a1:10:ad:c1:33:1c:8f:75:b0:86:89:5e:28:00:45:
99:e2:2a:d5:c8:9c:ff:90:8f:7e:15:7a:d4:c7:17:
6d:56:a7:09:6d:cc:3b:39:c2:e4:76:f5:44:72:7f:
85:0c:56:ba:06:fc:46:36:70:18:94:02:8b:fa:26:
47:78:62:93:99:96:01:a2:26:6f:7d:0e:0b:28:f6:
50:4d:ed:2a:c2:3b:48:18:29:18:1c:84:fa:40:ba:
bd:c6:0c:e5:7f:39:6c:48:e3:e4:b1:ea:3f:15:c9:
6d:a1:27:66:9b:6d:d1:a5:3a:6e:7f:c8:31:96:51:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:07:EA:02:B8:66:81:82:27:94:DE:05:B6:75:D2:41:05:36:3E
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:de:99:72:89:60:dd:e2:1d:1f:19:c7:56:a7:7f:4e:55:d2:
07:00:de:6a:c0:25:d2:e7:a0:d2:1a:e1:10:eb:ad:c7:91:6d:
18:4f:52:a3:b2:ea:30:62:84:4b:70:bd:3c:d5:0e:7d:48:d9:
d7:3e:db:bd:91:45:2f:a1:ae:f7:8d:ae:e0:e6:15:c4:1c:e2:
7d:c9:a5:c8:28:f0:f2:d1:95:18:d5:28:85:f7:1d:ef:4c:e4:
76:19:a9:9e:f0:89:46:3b:23:74:28:73:91:50:b6:9c:aa:9a:
60:cb:8e:ba:f7:10:e3:61:e9:d3:20:11:19:ce:35:b7:fa:79:
22:2b:92:b5:8b:4b:bf:7f:47:9f:ff:27:a0:ad:8e:02:a4:5d:
66:1c:73:d7:93:71:c0:76:92:fd:ce:be:f6:1f:58:ca:bd:25:
8d:e5:e2:ac:3b:6a:37:6c:72:2d:7f:d3:76:aa:18:6b:4a:20:
aa:cd:72:a3:2c:dc:36:34:47:7b:a5:49:3e:22:60:77:1e:4e:
ce:58:b7:0e:de:a6:ce:80:e3:33:39:be:48:36:d9:22:4e:ad:
a3:7b:6f:8b:f2:52:f8:a9:ed:02:d9:4e:8f:58:2a:81:47:18:
8d:91:64:f1:cc:13:fa:f1:0a:6f:7d:84:08:46:df:6d:0f:44:
27:15:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:30 2025 by rpki-client