Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: xddalLI176QKiapxbJA8nTbvO9MYnXHflrXObySTm8E=
Subject key identifier: 88:9A:BC:CA:8F:60:73:37:46:A1:22:83:77:A2:7F:7E:01:63:DB:83
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 0197C49380AF1E68E0854A737115A390E59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 155D
Signing time: Tue 01 Jul 2025 06:01:30 +0000
Manifest this update: Tue 01 Jul 2025 06:01:30 +0000
Manifest next update: Wed 02 Jul 2025 06:01:30 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: js6dprplcKxt+FEDd/w7/up656oLX2LUhz/3GIe0u6I=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:80:af:1e:68:e0:85:4a:73:71:15:a3:90:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Jul 1 06:01:30 2025 GMT
Not After : Jul 2 06:01:30 2025 GMT
Subject: CN=889abcca8f60733746a1228377a27f7e0163db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:ee:c2:1e:3b:88:74:36:b2:5f:6b:53:3d:
d9:56:dc:b6:d9:f0:63:ab:af:f8:26:bb:dd:5e:f0:
66:46:f8:f8:fe:70:94:f2:a5:4b:d6:86:a4:fd:b8:
98:98:1b:b4:5d:c5:09:ae:95:a3:b0:a6:0a:39:5b:
c8:fc:38:1a:92:b6:96:6b:da:3e:ac:62:cd:26:80:
a7:87:3f:03:65:41:73:0c:ea:0d:fa:9a:11:a2:89:
07:0e:e0:69:d5:7d:55:b9:8f:dc:c8:ab:10:e3:55:
96:03:3b:93:38:ea:14:fe:64:f4:78:72:ef:c6:cf:
17:33:6d:e5:11:f1:38:86:35:96:39:d3:88:3b:4d:
c8:2d:6c:19:9a:94:d7:b7:b0:db:27:81:44:fb:9b:
df:88:e5:a1:96:2b:44:5b:0f:73:db:46:09:cf:b6:
59:46:c1:cb:f8:75:d3:3b:a1:9a:85:e4:76:b1:37:
c1:8e:c6:d3:a7:81:cf:9d:84:51:d7:79:28:41:34:
7b:95:26:3d:a8:b7:6a:45:1a:4e:f3:87:bd:2c:15:
c0:b4:6b:bc:b0:32:b1:a4:27:11:98:76:a6:e5:95:
f9:39:3a:69:a7:e0:91:25:7f:44:45:69:2a:8a:81:
a6:82:4e:94:fa:0e:39:86:0f:b0:fc:f7:60:04:58:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:BC:CA:8F:60:73:37:46:A1:22:83:77:A2:7F:7E:01:63:DB:83
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:44:bd:57:a0:b4:2e:f4:c3:18:00:2c:29:9c:3f:ec:7a:
21:82:fd:19:03:66:c9:fe:2d:cd:77:4c:03:2b:a5:9e:bc:50:
fd:c7:f1:5a:b5:cd:11:b7:75:37:08:52:73:c3:8c:06:76:9e:
16:4a:1d:ae:7f:46:68:83:81:b3:45:29:ec:30:0a:c2:ad:a3:
40:01:44:4d:3b:45:bf:c5:ef:7a:3f:f4:ad:1a:73:a5:ce:84:
c5:90:78:c3:88:72:31:0c:f9:99:13:ad:e1:15:51:dd:48:75:
3e:c6:2e:ae:57:41:ff:36:a2:3b:7f:c5:28:65:e4:62:ea:d4:
68:e9:4c:ef:07:4d:fe:44:41:83:aa:43:e8:57:73:ae:d6:a8:
b2:07:93:99:b0:4a:43:69:5d:7e:78:a5:f1:25:26:84:8d:5f:
15:44:b0:81:2c:8c:05:e2:71:92:19:e6:62:2d:99:10:c9:42:
b6:95:17:7a:4c:ff:03:2e:15:38:e7:b9:dd:2a:80:4b:96:fe:
88:8c:c9:a4:0b:91:d4:06:95:f3:a5:13:d5:53:06:42:78:59:
01:08:f3:2a:2e:70:1d:82:4d:1f:84:e4:55:07:bb:76:c7:c8:
3b:aa:5d:9f:94:a5:d2:84:15:0a:27:ea:4b:56:87:89:eb:f2:
f6:1d:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:07 2025 by rpki-client