Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: 8J0l5kV0tclVrUt6QCSOLKpNcSjbFvxF8/6PlOdkfG0=
Subject key identifier: 9A:73:4F:9D:F0:69:7C:A4:48:89:CB:5F:AD:02:CE:13:5F:3A:0B:09
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0197B7B31812F7F732F05E0C6AC6E91EF593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 05A7
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: +3ONWBSQVPAK+vXR3GodYWGtNRSytX9KpW9EG1CPaJ4=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:12:f7:f7:32:f0:5e:0c:6a:c6:e9:1e:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=9a734f9df0697ca44889cb5fad02ce135f3a0b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:4d:68:4e:42:f0:78:c8:ad:b4:78:78:07:
1a:88:0a:1a:5b:e2:f4:24:83:21:90:86:4a:df:8d:
51:27:29:ff:ed:2d:2f:6b:a5:5a:d4:d7:ba:9f:4b:
68:45:59:5c:3f:24:36:17:a3:53:a0:45:01:3d:6b:
7d:da:68:be:5a:d7:b4:4d:35:5f:00:29:f2:84:1a:
f6:c4:30:e9:38:00:6e:ed:8b:62:10:45:ef:ac:bd:
13:dd:ef:02:5e:c7:df:62:5b:1d:3a:62:77:4b:97:
55:c9:d8:78:b3:6e:fb:a1:72:0d:42:94:07:82:87:
d7:45:12:c9:4c:98:a9:10:d2:e2:42:fd:37:d7:48:
a0:9d:37:77:52:c4:9f:4f:36:ce:86:14:68:06:32:
69:0a:5e:cb:ae:4a:13:32:28:9f:1f:79:8c:04:4c:
f9:99:52:26:cb:2f:73:c7:e1:30:46:b2:f2:56:05:
8a:58:c6:6a:dc:ff:2f:71:99:03:25:46:b0:55:f9:
88:c2:ca:e2:e3:e8:42:8f:26:38:b7:57:e1:cf:f1:
ec:3d:bc:cd:f5:ee:d7:bb:23:e8:68:04:20:da:e6:
32:b4:d4:17:6e:78:02:1a:e8:86:eb:87:73:4a:9e:
5e:bb:0a:8c:1d:dc:ca:7b:cb:30:6f:a2:2d:d4:95:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:4F:9D:F0:69:7C:A4:48:89:CB:5F:AD:02:CE:13:5F:3A:0B:09
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:fc:c1:a1:f3:b3:c0:88:b1:55:e7:fd:8b:38:65:70:e9:
05:7e:d3:d9:b4:24:26:90:d1:e1:c4:30:9f:47:84:9f:28:a2:
16:d6:07:46:70:ce:72:a2:fb:49:a5:3c:fa:72:20:a4:b4:84:
c3:54:da:8a:74:ec:cc:c3:4a:90:43:e2:7e:6e:94:ba:1f:05:
7c:fe:92:fb:71:22:b7:97:84:f3:1c:5f:2c:56:45:9b:0d:1d:
57:85:b9:07:d5:00:78:cd:0f:ca:94:07:a7:ac:a5:6d:7b:48:
de:60:3c:6a:9b:33:0a:75:e2:a3:97:28:69:49:86:3f:54:05:
11:a6:6d:50:ee:95:fd:f7:a2:ae:e5:6a:d4:7b:08:fe:7c:30:
89:91:d8:4a:d6:99:cd:46:d0:71:c0:5d:e8:e3:b6:3c:6a:b2:
b0:7e:8f:51:54:95:7f:88:49:2b:35:6c:9b:b4:68:e4:b6:5a:
86:1d:4e:28:b8:a4:9e:79:cb:f7:df:11:ec:e5:f7:46:b2:5d:
a9:07:0b:7f:9f:3a:2a:19:68:b9:e7:89:41:c3:af:99:cd:d5:
3b:2f:0b:26:89:bb:77:34:dd:2d:8d:09:b1:6b:5e:5e:2a:06:
97:fa:11:03:a6:3d:b7:cf:a4:81:d3:0f:dc:a5:d4:20:85:e8:
d0:e9:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:31 2025 by rpki-client