Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: YTzECibuqOPIv5sUbPrcpDKsEtcpX+iGLVwgffcWAFE=
Subject key identifier: C5:CB:1D:62:0D:17:35:4E:9A:A4:51:14:0B:E9:04:A4:43:F4:8D:1F
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 0197B88F7EB13EEB8C9D84DCE189E0F92E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 22:01:41 +0000
Manifest this update: Sat 28 Jun 2025 22:01:41 +0000
Manifest next update: Sun 29 Jun 2025 22:01:41 +0000
Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 976sXBjTKsnTqoTqa6MAQ8GmKYgeKnqiqCzMZX5rO9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7e:b1:3e:eb:8c:9d:84:dc:e1:89:e0:f9:2e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jun 28 22:01:41 2025 GMT
Not After : Jun 29 22:01:41 2025 GMT
Subject: CN=c5cb1d620d17354e9aa451140be904a443f48d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:ad:28:81:01:b9:9b:a3:9b:bd:47:86:59:
bd:bf:bb:3c:49:32:2a:97:84:d3:54:0a:85:22:a7:
27:cc:d3:ea:a2:2d:7f:be:fe:26:a2:46:8e:71:34:
af:b1:a4:61:d4:bf:38:80:2c:a4:a1:72:95:42:68:
d5:c1:55:e1:77:d3:aa:5a:9a:9c:61:da:fa:9c:21:
52:5f:15:c0:b1:91:59:a8:29:6d:77:9e:94:56:62:
68:62:f4:b6:fa:3c:7b:7e:ca:fc:35:9c:97:31:f2:
8c:a7:b4:19:b3:5b:dc:55:ff:49:7e:d5:70:7b:60:
3e:bd:59:89:6a:6a:2e:2a:77:60:e2:e0:cc:e5:fa:
08:14:03:a3:42:23:7b:13:35:70:8a:05:af:65:f2:
f2:7e:0b:c7:a9:7e:2d:bb:62:90:2d:98:cb:c2:66:
cd:50:93:4f:eb:1e:d9:5d:de:05:2a:eb:18:f7:6f:
3d:7b:8b:a4:0e:05:dc:d3:3d:6b:6a:71:f5:e0:1f:
33:e9:dd:ee:58:24:7b:6d:70:5d:75:8a:01:9b:5d:
4c:26:4d:0a:eb:3d:5e:eb:04:4c:b9:5a:52:21:d1:
71:01:f5:e7:ae:54:eb:c9:a3:1c:5c:aa:ed:b5:f4:
0d:47:c0:f1:01:5c:01:9e:cc:11:6f:b0:66:c9:63:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:1D:62:0D:17:35:4E:9A:A4:51:14:0B:E9:04:A4:43:F4:8D:1F
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:94:5d:26:34:80:19:60:66:47:f1:3d:77:9c:33:77:e0:2e:
34:a0:0c:ed:5a:4c:97:c7:5b:df:c3:60:bd:a7:be:eb:c5:89:
57:a0:f7:0b:d1:a4:32:98:18:c9:55:2b:d8:e0:67:81:02:4c:
d2:53:2f:a7:fd:21:f7:35:5c:04:0b:d3:69:25:ce:a3:88:d1:
e8:e9:8e:d3:0d:90:93:4e:79:fc:2d:d3:6e:23:2b:d9:ae:47:
3c:70:54:7f:b1:44:72:51:1a:6c:99:ad:95:e2:c4:f9:30:e3:
4b:67:54:af:e9:f8:5d:31:9f:e6:b3:b5:f6:c9:31:15:88:41:
e4:0a:d8:5e:1f:97:ea:75:73:89:fd:65:48:f7:83:3e:f2:b8:
94:44:40:00:15:e7:5b:c8:e7:9c:71:34:bd:74:f1:6b:64:56:
dd:bb:a4:db:5a:ea:d4:c1:bd:5f:e1:28:10:ec:e7:f0:6c:3a:
40:f2:a6:fe:65:49:fb:2a:b9:68:60:54:b4:6b:24:c5:43:e4:
de:b4:fc:18:44:80:cc:1d:1f:0a:84:1b:e8:f2:70:86:c8:94:
65:fb:33:b7:d7:8e:a0:61:aa:8f:eb:b7:8a:cb:ef:32:28:83:
0f:f8:71:f8:e0:b4:c5:aa:40:df:dd:ea:82:f5:95:b9:cb:c2:
40:b9:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:57 2025 by rpki-client