Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: oQyJopRNrdvRlc9IDAMQ4GwlbXeEk4aLrPF8WNk3whU=
Subject key identifier: C4:DC:D7:FB:C3:16:19:62:A5:3D:F9:C5:A6:3B:4F:88:A8:43:C3:E5
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0197CC4CDA8301FDCE908F0BE57443378E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0B9C
Signing time: Wed 02 Jul 2025 18:01:18 +0000
Manifest this update: Wed 02 Jul 2025 18:01:18 +0000
Manifest next update: Thu 03 Jul 2025 18:01:18 +0000
Files and hashes: 1: 8eAv8sSKqCobRHi1pPcWZI3QV5o.roa (hash: me5Ypddt6zuTrOyc9m6TejNlArKlNxDqSv65dSh/DKk=)
2: W3qS8ccHplCENHnAWCXalJ4Lxq8.roa (hash: h3ysUJyoiR9Pxj5SMBpAdJdk3U65tHclFMzHCEEhX4k=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
5: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: YYKXlaAozIOqeTiHLor3ba2/Un+lR+/azpLABgByXUQ=)
6: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:da:83:01:fd:ce:90:8f:0b:e5:74:43:37:8e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 2 18:01:18 2025 GMT
Not After : Jul 3 18:01:18 2025 GMT
Subject: CN=c4dcd7fbc3161962a53df9c5a63b4f88a843c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:da:6f:7e:f4:86:07:6d:8a:e2:e1:a9:31:
68:5b:b8:f6:1b:6a:be:a4:8a:67:0f:b2:c3:da:d3:
51:68:22:0a:cb:36:bf:c5:a3:63:46:8f:c2:29:e7:
77:96:6c:78:ce:b5:9a:06:23:fe:e1:9f:a8:c9:0d:
86:69:92:e5:05:e9:f9:1c:e5:8b:65:e1:43:77:ac:
30:f2:6a:bb:4d:90:7f:d9:21:7f:90:97:5e:75:f1:
cf:5c:e5:2d:d7:3d:40:09:9d:35:2a:b8:e3:74:1e:
27:2b:6e:62:18:51:a4:47:e5:13:1f:ba:b0:3d:b5:
25:26:b3:9b:98:24:d9:8f:5e:4d:04:37:9e:ad:d9:
42:88:ef:1e:8b:ba:9c:4b:cb:19:29:eb:0b:d0:f2:
38:7b:7e:6a:a4:12:bb:64:e6:88:a8:4f:87:be:23:
47:44:66:45:8e:d2:8c:23:09:43:97:3b:a8:03:97:
d2:32:f0:f4:28:e0:a8:cf:17:e1:96:1f:d4:65:85:
33:46:0d:78:37:02:91:5c:74:79:33:8e:77:5a:67:
eb:4a:a0:64:d5:cb:b5:ab:29:d1:c6:5a:b9:ec:72:
5e:6a:3a:6e:04:3f:20:39:66:6d:05:28:f8:67:33:
8b:24:64:80:3a:2c:f7:d8:d9:00:b2:32:25:6b:e9:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:D7:FB:C3:16:19:62:A5:3D:F9:C5:A6:3B:4F:88:A8:43:C3:E5
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:29:28:4a:4f:dd:a3:40:fa:25:a3:d4:ea:e5:f3:1f:a4:15:
89:0b:d6:89:67:9a:bd:f0:68:28:1f:73:3f:d8:50:39:4a:32:
b6:f0:6b:7f:6e:da:97:04:6e:76:c4:71:56:91:0a:06:fd:1c:
6e:1f:b4:8b:3b:ac:f2:bf:c0:b5:c0:99:ae:6d:59:e9:fc:0e:
8a:8c:bc:ca:01:12:71:70:b0:45:de:67:33:10:49:b6:4c:38:
b7:e7:52:11:04:93:a0:09:79:5e:91:f0:16:b9:6d:b1:fa:b6:
72:80:62:e2:56:45:9f:91:59:8f:8c:3c:b7:1d:c7:f9:fa:42:
2c:25:17:19:80:ba:72:09:ad:4d:6b:2f:0c:ac:0f:8c:8e:f0:
f0:e1:11:e5:c2:82:ef:79:1c:02:22:56:7d:bf:09:80:ea:61:
6e:09:7c:04:01:b9:da:3a:3d:66:2e:f6:ab:78:95:ef:3a:f9:
09:ef:f5:f7:31:c8:2a:0d:6f:38:66:db:20:c4:d1:2c:30:21:
3d:01:36:71:13:56:49:ba:d6:53:65:6b:37:eb:b6:ca:a0:20:
f3:e7:c5:66:dc:21:59:e0:1a:56:c0:f5:a4:f0:63:b4:7f:f1:
eb:e1:5c:df:3b:6c:a4:5d:5d:ff:78:87:04:08:1e:d4:97:7e:
5c:00:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:25:59 2025 by rpki-client