Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: fAe7ArUx8oYG/M5gEX0l1H2XJhTHuwqCurrv2cdOPwY=
Subject key identifier: 22:85:A5:02:73:26:53:47:79:31:33:A2:A9:6F:97:CB:0E:25:81:CA
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 0197B6D731F530DDDF8173EE0F6DD14E5646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: H2uTjTZ7Z/NqScFmbhIfLbztXIwzwq2N836Zfgp8lkk=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:f5:30:dd:df:81:73:ee:0f:6d:d1:4e:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=2285a50273265347793133a2a96f97cb0e2581ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:53:57:b9:57:3f:7c:37:f7:7d:11:7b:cf:
8b:c7:1c:be:58:8c:ea:5a:f8:00:62:88:3a:01:db:
cf:38:dd:fb:b2:80:2e:a4:f8:26:e9:02:16:36:a0:
5d:95:ac:b0:ca:38:e6:e3:64:f6:d9:ae:84:2d:88:
7f:7c:8e:c5:8f:de:46:b3:98:59:a9:7c:a1:69:55:
a6:ce:a1:eb:da:1b:9f:28:76:2d:54:92:32:c8:b5:
48:57:67:0e:4a:d7:75:a9:73:80:d1:c2:5e:e6:24:
88:06:e6:33:71:bc:e8:e8:5e:71:9f:83:0f:10:ef:
19:70:9c:35:f4:64:db:4c:52:46:13:35:aa:38:8f:
e9:20:58:86:1b:81:01:9e:a7:65:af:ab:41:89:a4:
3a:8b:ae:66:0e:0a:a5:6b:17:cd:9c:c0:52:80:2e:
b9:1f:cf:80:c3:97:14:0d:ab:6b:02:90:0a:07:e8:
41:b7:31:6d:3b:ad:53:0b:e7:cc:d5:fb:93:b4:fa:
f4:4c:0b:5a:39:1e:6d:f3:4f:f8:d7:cc:17:91:a8:
e5:9c:90:36:4d:ad:ba:de:aa:af:89:3d:e4:51:3c:
78:72:c8:c2:c8:61:98:a0:a4:6a:f0:d2:ac:b3:0d:
bd:f9:f6:2b:a2:e5:49:99:30:6a:c1:03:be:3a:4b:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:A5:02:73:26:53:47:79:31:33:A2:A9:6F:97:CB:0E:25:81:CA
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d4:66:6d:f5:c2:ed:a8:ad:0d:4e:c2:7f:7a:79:c7:7b:a3:
45:45:c3:d3:3c:9a:c5:9a:2e:45:c9:29:77:1f:4f:46:c8:e6:
0a:0f:41:3b:59:67:10:4b:9c:08:41:e1:16:05:f0:1c:79:0a:
98:af:0f:01:05:f9:7e:04:e9:0c:cd:87:b7:30:e8:15:ee:36:
94:c6:db:aa:25:25:b4:65:fd:12:c2:44:05:10:69:c8:84:50:
93:b0:16:0e:8d:a0:80:ac:ef:b1:e7:18:92:3b:07:92:34:65:
66:64:b9:c3:e2:74:03:5d:29:6a:1b:44:1e:b6:45:a2:98:6a:
33:80:1d:f7:0b:fd:96:fd:62:53:d1:b8:96:31:a6:5f:e4:bf:
dd:d7:84:6e:94:8b:76:65:19:5a:00:92:51:17:d1:38:bf:af:
ad:b6:88:cc:d3:fd:d3:a1:b1:e2:11:84:af:e0:e9:b1:7f:24:
19:81:4e:c8:f6:5f:87:1e:7d:80:f5:86:6c:5d:a3:ea:a0:ba:
d3:cd:19:37:cb:95:f0:36:95:9a:9b:a7:38:e8:f2:14:11:e3:
66:19:53:fe:4b:a3:49:db:14:6e:de:ce:cf:89:58:0f:4a:5f:
23:c6:3d:f0:61:f3:6d:79:71:c8:65:f3:f2:ba:45:f4:f6:f0:
ce:e8:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client