Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: Ox8bVVlekRoj8VMA4Z1cIWLcecJnWGvN3csTnDVKPFE=
Subject key identifier: E2:DB:62:38:99:12:DB:8D:80:10:E4:AF:E9:11:52:09:2F:15:F7:F8
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 0197B6A16B688005487E694EC1C8AE9F70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 06E4
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: DobjODk8Ifszx0MfCmW2v6wgGN5MtJ/pb7H6W1PLyTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:68:80:05:48:7e:69:4e:c1:c8:ae:9f:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=e2db62389912db8d8010e4afe91152092f15f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:7c:b3:03:9a:69:62:99:74:1e:d5:92:f5:
fe:ee:ae:7b:29:98:8d:00:8f:0c:26:6c:51:4f:3e:
b1:27:e8:01:34:41:6b:82:04:f5:4c:35:88:9c:7a:
78:16:18:85:96:ca:0b:ee:41:ca:f6:38:c0:c7:25:
fb:76:77:ea:4b:9e:ea:e8:f5:64:65:f5:05:3b:70:
fd:30:47:cf:cf:49:0d:d7:42:ff:ee:1c:f9:5b:9a:
c4:64:b2:6b:37:1c:be:14:35:b9:b1:cd:f3:3f:48:
5b:b7:aa:b6:d7:32:fa:28:64:21:e0:0a:c0:cd:a7:
26:3f:c4:37:5f:82:12:f6:67:2d:6e:3f:be:32:29:
e4:9e:54:8e:ce:51:b7:ca:93:bb:ac:68:5f:fb:33:
cf:39:77:03:e3:8e:2d:8a:26:db:ed:33:e6:c0:de:
ba:d5:50:20:eb:be:b1:90:75:55:8e:c6:ea:fb:9d:
50:ae:f2:89:55:ab:36:04:d9:b8:eb:8c:89:33:18:
09:84:26:51:ec:b5:bf:f1:ef:01:18:3e:a1:e1:ee:
9e:62:b3:cd:cc:c5:ed:39:92:a3:11:84:01:3b:73:
95:eb:e8:95:47:1c:db:06:d5:8e:bf:cc:7c:44:46:
6f:67:46:dc:e9:ee:1a:a3:c5:24:5a:4b:ea:0c:36:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:62:38:99:12:DB:8D:80:10:E4:AF:E9:11:52:09:2F:15:F7:F8
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ad:8d:e0:c6:9c:1d:7b:77:93:28:4e:9b:0f:36:5b:0b:fa:
5a:98:bb:7a:a3:06:47:cb:5d:1c:8b:83:e8:8c:dc:60:39:99:
ab:1d:a4:d0:0c:ce:0f:ed:50:5e:c0:ad:36:f5:86:76:2c:80:
61:2c:11:a4:40:c6:e3:ce:a2:ff:77:25:20:79:db:0b:67:c8:
c7:8e:03:2c:8b:1e:9e:99:9e:42:f9:22:4c:30:cf:ea:ba:6d:
98:a7:1a:15:3f:81:24:96:ca:4b:57:5f:7b:1e:57:d8:70:a8:
f9:54:e4:fc:f5:94:5d:7a:6c:35:57:8f:51:12:d3:27:45:2b:
6f:0a:98:c5:d9:62:ac:18:4b:9d:a2:c4:e2:95:e2:96:bd:fb:
d1:c3:b4:65:b9:33:27:61:61:3c:c2:25:bf:0e:84:3f:5d:64:
6c:92:72:b1:2f:08:fb:8d:b9:bd:ad:57:56:56:59:98:f8:2e:
d9:a9:8b:87:21:ab:88:f4:1d:83:7a:58:45:c5:c2:42:a8:a8:
45:00:40:53:41:61:15:75:c7:9f:15:39:40:47:5a:16:db:47:
5f:2f:06:79:8c:51:28:fc:02:4a:72:76:82:34:16:5c:a6:6e:
c7:7d:fe:10:84:f0:a4:27:50:56:91:51:c1:25:e2:8d:51:3f:
21:a0:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:18 2025 by rpki-client