Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: 7vNhTtSGnp4HfePYh9856A8KzkzGydd/Z31ynw9I2eY=
Subject key identifier: F7:CC:6E:DE:0C:EC:0A:1F:A1:7C:15:5E:51:56:7B:23:99:CA:5A:D1
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0197B8214EE66588F559CB5AEF52ED196458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0CAA
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: bDRwg6DZjeBKAIkOERoXsFIY7L2nSfxqkRRC6Pa1QzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4e:e6:65:88:f5:59:cb:5a:ef:52:ed:19:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=f7cc6ede0cec0a1fa17c155e51567b2399ca5ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:87:ba:86:c3:e4:4b:b7:4a:ef:23:a1:0b:
b3:dd:d4:22:69:79:eb:4a:bf:32:e8:83:ed:13:a0:
6b:f4:ce:9b:d1:20:fc:0c:b4:f5:db:ec:6d:b9:d5:
5d:1d:7f:02:33:fd:b1:5d:02:0b:64:ce:4c:2a:af:
a7:99:4a:64:30:28:b3:15:bd:14:6f:05:e2:1e:61:
06:b2:bd:9f:66:e1:e4:ee:0f:bf:f0:40:c5:19:57:
ee:9e:92:91:29:2a:2a:67:ce:c1:3c:76:de:d6:44:
34:62:12:31:ca:93:47:ce:ad:93:c4:bc:ea:b3:eb:
27:97:1e:cd:88:de:51:43:ee:2e:b0:9f:b3:ea:92:
dc:e3:67:e5:3e:a0:2a:85:ab:73:ad:b2:96:2b:1b:
76:95:50:cc:bd:e2:c4:0e:86:ae:50:96:3d:57:6e:
cf:aa:40:ae:b4:64:ef:d4:02:3f:08:c1:5e:5b:28:
90:96:0e:c3:91:f0:e4:28:61:e2:f7:db:2c:12:a7:
69:c1:8a:b7:af:50:2f:32:24:75:e0:ac:43:fd:78:
77:55:94:11:05:9d:13:cc:82:14:74:28:b7:93:da:
63:f3:9f:25:82:cf:5a:63:6e:87:51:8b:d2:92:32:
35:41:09:78:fe:0c:5c:1c:b1:b8:2b:5b:dd:49:32:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:6E:DE:0C:EC:0A:1F:A1:7C:15:5E:51:56:7B:23:99:CA:5A:D1
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:68:c3:c0:55:9a:51:9e:75:5d:db:61:b1:4b:18:a3:2f:
37:6f:d5:70:83:93:49:62:03:b2:a8:04:63:2d:ee:2e:82:9e:
46:09:4f:56:76:cc:33:9f:0e:f6:46:e3:af:09:19:42:44:37:
4a:de:05:25:cf:b4:53:b1:df:e2:10:6f:dc:43:19:82:2b:e4:
7b:79:68:7e:65:42:7b:72:ef:a3:fe:e3:ee:e7:37:b1:f2:4d:
61:43:52:66:77:ed:64:84:0c:f4:40:4a:65:0d:45:00:c9:cb:
7c:6b:2b:a0:ad:9b:ce:0c:43:8b:f4:c0:91:4c:fa:53:1b:04:
87:b0:a5:68:51:61:d2:c6:da:7f:97:16:fe:dc:38:bf:98:7a:
f4:fe:ca:2b:c4:a8:87:9a:42:3b:58:63:64:f9:59:29:72:17:
7b:6a:d1:95:da:98:27:e3:e0:c2:ef:f0:dc:15:d2:2a:3b:76:
8d:68:c1:7f:79:c0:13:7d:6d:5e:29:f9:8b:4b:5a:ea:b1:69:
d6:6b:90:30:79:3e:5d:7e:3a:76:16:e7:c5:a2:05:c5:1b:a3:
78:db:ba:bb:0d:86:96:a1:92:89:ef:da:c2:65:a3:89:e0:fc:
b5:05:af:8c:11:2d:91:c2:0a:5f:a0:ad:be:48:b5:92:24:dc:
1e:56:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:47 2025 by rpki-client