Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: HZQ0dG/RgTetuy4PzQ6moCLYqikgRcP9vz2YFdwebgY=
Subject key identifier: 23:C9:37:DA:6F:09:2C:3A:D2:C3:8C:08:59:8B:91:17:09:18:92:2C
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 0197B6A0DB7CCA70B5533D7F9E6DD2E9A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 11C2
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: oomMpyyopvJqlBjnxfyfWIi9m7DxhqDoi+pu+ycRxFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:db:7c:ca:70:b5:53:3d:7f:9e:6d:d2:e9:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=23c937da6f092c3ad2c38c08598b91170918922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:62:ca:d5:9d:ba:1a:0c:e2:6c:f2:a1:fa:
2a:b0:47:6d:9e:4d:be:1c:c6:e9:19:5b:a2:51:93:
ce:b8:99:e1:32:d4:5b:b7:d6:59:29:7e:ad:93:5f:
0a:ad:6a:9d:dd:67:4b:83:8f:70:53:f9:38:01:b9:
a2:26:a6:43:f1:33:d3:ca:60:9c:f8:6c:cb:40:80:
e0:69:91:f5:99:4e:74:e5:f8:37:41:03:eb:64:44:
da:58:9f:f1:74:b4:7f:a1:c0:46:76:cd:7b:73:c6:
3a:3f:37:a8:8b:be:de:e7:18:f6:3c:58:24:96:56:
1f:5a:5e:61:31:af:b6:5a:6b:62:88:a0:26:5f:b4:
1d:df:f7:84:d4:47:3c:8f:25:43:8f:9e:25:59:7f:
a3:e4:09:c8:af:77:b1:76:7e:e9:01:39:b8:9a:ac:
06:79:11:3e:34:5a:7e:77:1d:86:f9:f6:75:4a:27:
c7:33:69:30:df:29:b5:a6:f8:9f:b8:60:99:7c:f9:
dc:d3:08:63:ef:1a:9c:01:ba:84:42:80:da:49:08:
50:5f:7a:40:01:98:b2:3b:62:85:a5:89:ab:50:dc:
2e:8c:f0:ab:82:70:b7:56:aa:87:12:82:4c:e6:1f:
7a:f5:e8:dd:8b:d0:6f:48:07:1e:12:68:56:ca:b4:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:37:DA:6F:09:2C:3A:D2:C3:8C:08:59:8B:91:17:09:18:92:2C
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:61:47:30:a9:56:07:1b:aa:b4:77:25:1f:28:2f:42:97:
5e:4a:92:06:47:1a:ed:23:d5:9e:83:b9:b9:e4:94:0c:c1:0e:
ad:ca:23:b4:48:ab:29:97:9e:08:38:b5:40:b4:9f:71:93:02:
57:ec:9f:28:6e:3d:00:65:a2:07:23:a4:a4:54:7e:39:85:6c:
8e:da:2f:13:2e:f1:dc:1b:55:51:07:d7:16:eb:b7:8c:fe:8d:
d5:6c:67:5a:5c:ab:a7:a3:81:59:f3:71:25:ed:64:fa:13:c3:
b0:53:88:33:9c:21:44:82:eb:23:85:a3:85:99:e2:72:11:66:
2f:62:d8:ee:b6:16:dc:5e:69:31:65:91:4f:ff:46:44:8b:9b:
0b:ff:82:ba:7e:f7:5a:be:9b:f9:e8:20:da:e5:4a:0c:bb:b1:
d0:38:ec:f2:ce:7b:d7:d3:fd:5e:46:1f:02:53:31:3f:64:94:
af:ec:1d:8e:ea:ac:e7:aa:30:7d:b9:6b:56:f5:ec:e3:dc:6c:
f5:fb:fe:25:83:3a:68:5b:ce:c7:57:65:63:9f:c7:d8:7a:82:
ff:08:7f:69:b0:80:bf:31:58:2f:9d:20:8a:d9:fe:3a:86:bb:
c0:bb:d7:2e:3e:a2:0f:96:65:95:74:2a:56:da:ec:96:37:07:
e1:81:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:18 2025 by rpki-client