Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: MeDfs1t5qmZvBRHh9V8qAGFdwwGnWRJn59uG9F13SOM=
Subject key identifier: 0F:D6:58:B7:43:84:17:45:4A:D1:48:68:EA:F1:07:08:C3:A4:A7:F1
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 0197C12424695C7F135D717073240C9E5384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 1575
Signing time: Mon 30 Jun 2025 14:01:00 +0000
Manifest this update: Mon 30 Jun 2025 14:01:00 +0000
Manifest next update: Tue 01 Jul 2025 14:01:00 +0000
Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: nnyHNpdJRIegDw4UiKUNUmfNlkIo2RQQZBvVHZR6ivk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:24:69:5c:7f:13:5d:71:70:73:24:0c:9e:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Jun 30 14:01:00 2025 GMT
Not After : Jul 1 14:01:00 2025 GMT
Subject: CN=0fd658b7438417454ad14868eaf10708c3a4a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:c1:3c:86:bd:d1:a6:4b:da:2b:11:a3:24:
75:ba:6b:54:6a:33:b3:5d:f0:13:a6:ef:a5:31:4a:
82:fe:12:3b:8b:5e:6a:b3:76:70:fa:11:38:fa:40:
2b:d3:22:22:b3:7c:c5:0c:c5:b5:81:65:00:86:76:
de:ae:61:8c:6e:3b:50:59:a4:9d:a3:ca:16:88:a6:
62:1c:af:18:8e:0d:b4:68:5e:40:ae:85:e9:cd:e9:
ab:fb:50:9a:f3:af:f1:e7:d9:fb:4a:26:90:2d:c4:
2d:8c:5d:b2:5b:e3:82:44:b1:8d:65:c7:ee:d2:e2:
f9:33:6d:20:eb:d4:15:f6:6c:4e:9a:99:57:4e:56:
90:67:ec:8a:37:2c:b3:7f:b1:bb:ab:40:c4:cd:76:
bb:36:5c:82:3b:b9:a8:00:68:6c:db:20:34:8a:36:
c6:5b:85:2d:49:5b:99:22:d1:11:ab:00:f3:33:3e:
16:f0:1d:a1:9f:74:a8:32:be:54:4a:c7:16:9f:16:
70:d4:31:b1:d4:92:8b:7d:a1:47:37:5a:48:47:cc:
a4:de:4d:6b:25:dc:d0:7d:97:e6:44:47:88:a2:eb:
85:27:f8:01:70:ad:4a:ed:e5:c2:7a:75:7b:b4:ec:
ef:76:ea:59:53:99:3b:21:59:89:5f:1e:3d:5d:0c:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:58:B7:43:84:17:45:4A:D1:48:68:EA:F1:07:08:C3:A4:A7:F1
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:5c:34:83:85:5d:ae:1d:e4:11:22:fe:cb:3a:d5:87:61:24:
a8:69:fd:66:98:b7:ac:7c:50:e8:fb:9d:6d:5b:8d:7d:b3:dc:
26:3c:ad:0a:32:04:34:53:e2:5c:b2:85:be:f8:05:88:3a:0e:
a1:7d:76:3b:08:90:4e:c9:c1:a6:33:98:c8:5c:79:ff:ad:e1:
cc:2c:29:eb:66:f6:c6:84:43:f1:84:c8:25:8c:31:ab:da:fb:
83:77:9e:9e:be:2d:7c:b1:f0:f0:b0:e3:62:a0:31:a8:d3:23:
98:f2:44:d3:dc:6c:8e:d3:b9:22:06:d1:d9:4b:a5:cc:95:98:
2a:0f:af:c3:ff:5a:d2:fc:bd:dd:07:16:3d:26:e7:0a:2b:a7:
21:cf:1b:92:e8:97:cf:b1:83:ab:1a:f4:d8:91:64:a7:2b:14:
29:67:97:51:de:a1:3d:13:d6:45:c1:6b:f3:a0:17:74:16:0e:
d0:5b:da:01:a5:85:a2:0a:fb:8b:e9:d5:6b:fc:ef:19:27:88:
eb:5f:a7:63:41:99:b3:5f:71:1d:10:21:f6:06:99:e4:9c:4f:
89:f6:f1:23:a8:18:eb:bb:5c:1d:75:0b:dd:f7:5f:a5:ff:f5:
6c:aa:10:9a:cc:c8:bf:b9:9f:85:63:7b:06:11:cd:a6:d0:33:
69:8a:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:54:07 2025 by rpki-client