Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: pPOSAhqSu1s3D7mras5rDYF4spWoPgiU/weTeB5HAu4=
Subject key identifier: BE:56:BF:34:34:2B:C2:3D:A0:B1:AD:83:D5:6A:DE:D0:FD:43:54:2D
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 0197B88F586B91D76EBEEED2EB589A509016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 54
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: iWENN/N2DdbwcJrTDTRkY3gxVgN+wMdeKL6tU8ODsB0=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:58:6b:91:d7:6e:be:ee:d2:eb:58:9a:50:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=be56bf34342bc23da0b1ad83d56aded0fd43542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:9c:e7:ed:e1:9c:2b:3d:67:2a:29:9c:6d:
bd:e2:73:ef:1d:d8:69:63:fe:d2:3b:10:a7:46:b0:
45:d8:ba:e6:d7:04:f8:3c:38:09:2d:4a:d7:80:05:
33:5f:bb:22:a4:46:e7:b9:cb:d8:c4:dc:23:4e:d0:
f3:05:25:b2:14:c5:07:bf:77:6e:f6:91:09:32:ab:
31:99:fb:7f:84:bd:4a:e6:3c:9b:08:7a:e5:34:16:
ab:46:80:18:6d:79:20:6f:27:10:e5:03:7d:a7:bd:
68:55:8a:fe:24:cc:53:a9:6e:49:90:91:b6:29:5a:
64:92:63:38:fc:ca:02:8f:23:ec:ae:39:51:8a:39:
71:ec:a4:ae:08:a7:b5:ef:21:3f:14:41:83:71:12:
38:15:cc:69:73:e7:94:18:17:25:52:21:08:17:fb:
ff:26:b1:4c:8f:5a:d8:77:17:02:12:8f:ee:97:10:
c1:b2:59:07:0d:65:49:20:f9:54:0e:db:df:a9:ee:
3c:f6:08:4f:cd:de:b9:3d:06:e9:24:ee:92:57:d7:
6e:47:4e:06:89:8f:40:59:28:7e:ce:13:7d:6b:97:
e4:14:ca:5b:35:06:07:06:39:c2:da:57:5f:ee:ff:
f3:5a:e7:37:8d:70:cb:ae:2a:a4:84:27:75:2e:96:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:BF:34:34:2B:C2:3D:A0:B1:AD:83:D5:6A:DE:D0:FD:43:54:2D
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:94:da:54:14:c1:a1:91:5a:c5:70:9c:18:37:1e:32:e0:
7c:22:c6:46:ef:09:82:c9:47:74:4c:97:36:8c:a9:a4:b2:2f:
2c:67:8b:f9:18:f8:a6:91:52:5d:67:78:df:f9:4c:cc:bf:80:
8a:fd:95:b1:23:17:2f:23:17:1a:8d:f2:d1:0d:2c:1d:43:aa:
9e:7a:ef:f5:5c:a8:49:5c:81:e5:b7:fd:53:8a:d0:56:eb:4a:
4a:b9:ef:3e:f0:8c:e0:ed:51:24:9c:86:fd:f3:65:6a:fe:fd:
e0:f5:f1:cd:d8:57:b5:75:76:fd:fd:09:7a:df:3d:2f:13:e4:
34:cf:6f:0a:ff:9e:1a:11:90:9d:83:be:38:e6:79:f9:3a:8a:
38:a3:00:09:cd:21:c5:d2:25:56:dd:bc:6c:f3:ba:e7:a5:48:
d9:6d:7f:97:9c:bf:0b:33:09:c0:c5:93:3b:b5:86:d3:50:dd:
e6:b9:d1:7d:bd:87:05:35:8b:64:36:0e:4c:54:a8:dc:c8:e4:
cf:15:71:77:28:d1:a9:74:a9:46:cb:df:68:67:b5:64:b7:a7:
c7:81:e4:a6:0a:2f:fd:41:3b:2c:bc:b9:91:c4:3d:1d:e9:42:
55:3e:47:99:7e:7d:35:f6:0c:e5:da:5f:5a:f5:03:fa:c0:ee:
79:42:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:32 2025 by rpki-client