Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: 9yp3lUPlV8j5ns2zQeNhBMW8B0v4uXMRRv/61YtE+U8=
Subject key identifier: E1:87:8B:D5:B1:79:67:C6:11:E9:C4:A5:6A:EC:D8:F6:E6:33:4F:C1
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 0197B88F21068EDE366724856538CA4674F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 02CC
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: meOxo+mLnG6Z9JoKeafhUpyMGE28cjNaSqpzfqRXseg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:21:06:8e:de:36:67:24:85:65:38:ca:46:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=e1878bd5b17967c611e9c4a56aecd8f6e6334fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:ba:c4:52:78:fe:58:d0:08:66:28:2e:a6:
aa:73:59:08:c1:0f:95:48:e6:02:a7:e2:6e:91:d8:
c2:a4:f0:45:5d:34:c3:40:13:75:68:1c:8b:ef:09:
37:98:f2:38:80:36:93:4b:73:f1:ac:2f:0b:66:9c:
4b:d6:cc:2e:21:a5:cb:17:85:24:5a:3b:27:f9:66:
f0:9f:9b:68:0e:3e:43:c6:f3:cc:12:4a:77:45:50:
96:ee:ee:8c:7e:52:bf:f4:44:e8:15:da:2c:d9:c5:
8f:9a:05:c9:c8:1b:cf:a4:f0:98:e4:e8:92:c2:95:
26:b9:f1:a9:f0:0d:10:86:76:14:61:3a:f9:8f:3f:
11:c4:42:86:3e:6c:f6:07:18:95:9a:94:0d:c9:02:
01:2e:b9:41:cb:bf:58:0b:f3:ec:62:92:22:e8:27:
4d:96:d5:cb:4d:3f:c3:f5:ee:dc:6f:6b:fd:13:29:
ca:00:43:86:68:79:d6:ce:8f:d8:8e:a0:f1:a6:44:
17:72:8b:13:1e:98:60:80:7b:8a:cc:0c:54:87:dd:
0f:ae:f3:9d:8c:4b:09:4b:18:05:03:39:34:b7:e1:
1f:73:40:1c:e0:6d:81:34:9e:ae:59:fd:e8:6c:44:
4d:11:42:a3:e1:fd:a7:7f:95:fd:03:23:26:1f:f1:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:8B:D5:B1:79:67:C6:11:E9:C4:A5:6A:EC:D8:F6:E6:33:4F:C1
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c1:90:c1:4a:d7:f5:46:16:3e:ee:3a:f5:4b:49:5e:07:e7:
86:a6:22:f6:7f:17:1f:70:07:0d:c2:9e:92:35:be:cd:9e:99:
3e:0c:db:1b:42:f7:7b:6b:1a:5f:06:a2:93:7a:6e:f9:c7:a7:
0f:83:dd:f8:e2:c8:d9:e0:77:67:de:7e:ed:4f:80:07:da:9e:
18:a8:1d:d8:5a:80:5b:55:4a:e9:a1:ea:6b:9b:ec:eb:31:83:
34:63:84:16:dd:d5:ce:56:73:d0:19:ac:b2:f4:87:a8:84:30:
81:7b:e5:46:80:80:2c:7f:d6:c7:75:af:c4:c2:8f:38:f3:bc:
96:ac:47:ed:78:00:52:22:2a:81:36:45:15:ef:a6:fa:f9:d6:
67:22:8e:d3:82:52:a4:78:ab:28:46:05:74:ca:7d:a4:28:4c:
c9:83:bf:f0:8d:d6:e6:65:46:aa:8a:0b:94:5b:ae:a3:19:1c:
19:e0:da:b4:88:8c:31:f4:1b:3f:1e:65:1b:cc:3f:86:f3:e4:
20:6e:d5:25:75:bc:ef:f6:52:32:f4:4d:76:45:ea:57:58:60:
41:cb:73:fe:aa:13:9d:70:a1:c5:91:2b:b5:33:0f:4a:f9:67:
27:01:c6:76:cb:be:90:ba:d3:03:35:af:cf:d3:d7:64:b7:db:
19:ef:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:10 2025 by rpki-client