Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: kQXawI98TIkDOjtVxhLoHzgRbSbGW7LWO3G51EmzTlw=
Subject key identifier: 12:D9:1F:5D:14:E8:97:29:B6:98:34:B0:F0:C1:77:83:E5:BF:58:F5
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0197C80279CAAAD81990DB3B4EBAAB32CDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 08A0
Signing time: Tue 01 Jul 2025 22:01:34 +0000
Manifest this update: Tue 01 Jul 2025 22:01:34 +0000
Manifest next update: Wed 02 Jul 2025 22:01:34 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: azd7EQjJu2L1Coai3SH5UN7nysipZsbHBF6cbxzJUP0=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:79:ca:aa:d8:19:90:db:3b:4e:ba:ab:32:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jul 1 22:01:34 2025 GMT
Not After : Jul 2 22:01:34 2025 GMT
Subject: CN=12d91f5d14e89729b69834b0f0c17783e5bf58f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:48:03:3a:a2:f8:9a:02:d5:dd:3e:b4:ac:
bc:0a:ce:d2:da:e8:8d:15:69:1c:70:d2:e6:ec:1d:
9c:db:bb:62:48:f2:45:52:3a:29:08:a3:f5:43:5f:
65:01:48:2a:d3:92:13:2d:c7:6f:3c:e5:d1:b2:eb:
4d:d9:82:f4:e5:fd:91:fc:27:98:56:53:96:13:e0:
54:2d:f6:67:39:65:83:eb:b9:0b:28:b6:b7:e2:e4:
f2:bd:4d:91:13:d3:81:3d:fe:73:0c:d9:f2:e7:a5:
fe:86:e0:0b:c0:06:6e:ba:3b:b1:65:ea:d2:7a:f6:
b5:94:9f:25:8d:5c:c7:b2:f2:42:8b:bb:1d:38:45:
47:35:74:60:46:0c:31:85:dc:0b:78:8a:32:57:19:
de:dd:b2:ab:1b:86:eb:3e:10:8c:d9:25:73:a0:6e:
29:6b:4b:b1:98:02:87:52:f1:db:24:e2:cc:e5:b3:
3d:71:51:13:0e:de:57:a1:9c:cc:e4:43:30:3f:6b:
58:69:18:bd:23:89:43:0c:ab:fd:4c:db:03:e2:3d:
ff:8d:d3:d2:75:ec:5f:3d:2d:67:70:12:ff:ec:2c:
3c:e1:8c:d4:8c:b5:ef:41:f9:f4:a8:b3:49:a9:3a:
6b:a5:20:14:e9:4a:0e:23:65:64:a9:5c:22:65:43:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:1F:5D:14:E8:97:29:B6:98:34:B0:F0:C1:77:83:E5:BF:58:F5
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:51:78:bc:f4:ae:f0:3d:a5:06:09:7b:ab:f6:38:a1:95:73:
e0:b5:f0:cc:a6:5a:71:24:f4:36:fc:15:b4:97:5d:de:1a:bf:
d1:65:a2:e7:c6:ba:62:a3:80:b4:ed:d6:5a:48:6f:73:b7:36:
ca:fa:e4:3e:c5:8f:a6:eb:e7:68:3d:35:bd:00:78:5e:77:43:
51:74:2f:74:eb:2d:9d:c2:59:be:f4:d7:ca:23:af:12:09:9d:
e8:dc:a8:29:ab:8c:17:f5:63:b1:d1:d3:11:2d:28:be:65:d0:
a7:3d:42:5b:60:81:a9:8a:46:e4:5c:76:be:fd:7a:8e:43:50:
9f:5c:ae:44:1a:07:8e:af:ff:fb:5d:9f:bc:dd:a7:7e:f2:e7:
be:29:a9:7f:68:a7:02:be:c9:88:bf:92:d1:fe:58:50:b2:20:
5e:2b:7e:80:87:e3:13:85:66:47:95:e8:43:c3:d0:0f:2d:8a:
97:02:ac:88:c0:8d:ed:ce:fc:1d:48:80:d2:bf:67:dd:cd:6d:
56:c7:8f:d3:64:e8:3c:39:f3:a9:04:79:6a:1a:e0:5a:6c:1e:
d5:bd:b8:92:1d:3e:df:6c:3c:4c:32:9e:b1:97:b9:bb:cc:12:
55:55:9e:c4:91:b4:3a:6b:08:b4:15:d2:45:38:62:19:45:9b:
f8:ec:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:15:59 2025 by rpki-client