Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: x19So+zVc1P8GCUXx/IgWjzlNq3r7oxlmL4/rqAd9mc=
Subject key identifier: AF:82:41:D0:B9:B6:44:53:EF:D6:F7:0B:CA:98:6F:0F:26:56:C1:DA
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0197C6EF2D76FC6B4ED3C9DB5C91324AD539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 1360
Signing time: Tue 01 Jul 2025 17:00:52 +0000
Manifest this update: Tue 01 Jul 2025 17:00:52 +0000
Manifest next update: Wed 02 Jul 2025 17:00:52 +0000
Files and hashes: 1: 7Cbq0-9TtgLYQeu52VZUWksHnwE.roa (hash: JkpuN02DfnBu6RSAax0V6uNhARwqnNXw/JbyXJtDiJ8=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: 3vWldxxNNJWv2Y0i6AJwsR6wtde5PiPx+wN4pP8AL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:2d:76:fc:6b:4e:d3:c9:db:5c:91:32:4a:d5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Jul 1 17:00:52 2025 GMT
Not After : Jul 2 17:00:52 2025 GMT
Subject: CN=af8241d0b9b64453efd6f70bca986f0f2656c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:68:03:13:62:2d:32:5c:a3:f2:a0:c7:b2:
42:a2:8e:5e:2b:20:87:ab:71:23:b5:45:5a:a8:4d:
47:e7:01:27:1a:a7:0c:f0:16:a0:40:7b:24:73:bb:
7b:7b:9d:94:fe:ff:36:9e:28:0f:63:01:b3:a2:32:
f8:b7:87:56:73:c4:77:96:86:37:c8:b3:23:79:d8:
b6:30:49:ae:e5:8f:64:27:bc:5c:a3:15:0c:4d:a0:
b7:25:15:ed:e3:8b:eb:e8:f8:b2:79:88:ac:69:f8:
f9:40:d3:49:d4:f6:29:c6:bb:3f:41:9b:45:2c:a7:
98:7e:66:52:b6:03:52:84:ac:eb:33:29:61:1e:d9:
0e:aa:cd:13:d9:73:50:86:2a:83:71:3c:1f:c6:db:
3e:1f:30:84:45:c9:81:e2:5e:d4:ad:da:a9:23:d9:
01:df:af:a6:fb:09:0c:98:c3:69:6d:c3:72:be:e9:
47:a7:b9:ac:08:20:3e:95:9a:04:6a:cd:d8:64:28:
37:5b:0e:3b:b7:53:3e:90:be:a7:2e:15:8d:2d:ac:
83:ac:c4:d0:4f:0d:40:c1:71:c5:3d:0e:9f:b0:17:
1f:69:63:3b:89:62:f5:2e:7e:37:9c:1d:a5:78:38:
09:98:5b:e4:47:c0:fc:23:28:d0:91:8a:8c:40:38:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:41:D0:B9:B6:44:53:EF:D6:F7:0B:CA:98:6F:0F:26:56:C1:DA
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ce:1c:84:d4:e4:eb:8c:87:e2:e9:e0:77:e3:c5:29:00:f3:
62:38:7c:9e:3b:82:30:c7:22:db:de:8b:3a:17:72:55:8e:f6:
11:72:4f:77:ab:7b:b4:cd:80:dc:9e:f9:f5:da:70:b0:2c:16:
ce:c7:0c:e0:f4:65:66:a4:a7:d6:98:1a:a4:ad:01:52:a2:37:
e3:3d:b3:06:ca:76:95:69:32:e1:6d:f7:55:9f:79:52:0d:69:
15:b5:7a:67:6a:98:be:32:7c:a4:15:7d:1c:4b:93:3d:7f:47:
dd:46:d0:6c:2b:49:ba:d5:51:72:d3:98:48:5c:4f:94:8a:9a:
6d:ff:ed:35:f5:54:74:8f:af:e4:12:8d:73:3d:e1:09:7d:66:
a0:29:7a:fb:f8:17:32:65:69:5a:a1:f5:e7:15:88:de:20:82:
07:fa:03:6b:2a:62:d8:40:d3:01:e0:d4:0e:70:00:9b:a2:63:
cc:1a:52:6d:4d:c2:49:fa:83:bc:b7:04:a4:6c:92:04:c7:c7:
95:3d:8b:ec:c5:44:aa:17:fc:2c:8d:30:70:5b:8c:11:6e:28:
4d:eb:4e:0f:fd:b9:7a:02:ee:56:0c:58:d1:c9:14:d8:00:d5:
af:da:e5:5a:46:e5:6e:9a:e6:ee:9d:98:36:9f:8b:f2:4d:09:
64:94:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:45 2025 by rpki-client