Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: j265Iv151CZf2ojQIky3OFetWhsQvldGfXDPVVqZhQk=
Subject key identifier: 28:D5:94:42:98:6C:CD:B4:70:BB:2B:18:40:7E:76:A7:6B:4C:E3:5D
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0197C38060E61B1DCD5DCEE9C94767846328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 0394
Signing time: Tue 01 Jul 2025 01:00:59 +0000
Manifest this update: Tue 01 Jul 2025 01:00:59 +0000
Manifest next update: Wed 02 Jul 2025 01:00:59 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: j64EbKGFImFCpZ9F94MCCfDDl7Thw9FZGOOn+j9nnFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:60:e6:1b:1d:cd:5d:ce:e9:c9:47:67:84:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Jul 1 01:00:59 2025 GMT
Not After : Jul 2 01:00:59 2025 GMT
Subject: CN=28d59442986ccdb470bb2b18407e76a76b4ce35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:ad:11:54:43:76:38:73:e7:05:27:02:c5:
a7:26:21:9a:44:d5:9b:88:de:76:37:08:cd:16:a3:
05:81:6a:03:04:41:22:41:74:79:61:0c:9f:f8:22:
54:9f:7d:fa:bc:3e:57:29:76:19:ec:f7:cc:37:22:
d2:40:5d:09:28:77:5f:22:bf:e8:7e:ad:4c:03:56:
5a:22:62:b9:9a:80:86:4c:dc:f2:31:24:b3:fb:68:
07:12:ed:c4:bf:db:28:0f:14:e8:1c:ff:3c:b3:bf:
ef:bb:67:37:c7:f7:8b:74:93:c3:34:4b:07:39:aa:
cb:d6:00:4b:6d:a0:5a:d6:b8:23:ef:c9:85:b6:98:
1a:97:6c:e9:5e:c3:d8:66:27:bc:c8:06:df:e5:d1:
5f:52:d2:08:fa:54:df:72:8b:2f:17:cd:31:6e:a5:
bc:35:a1:79:ff:2a:9f:01:32:eb:53:23:cd:0a:8f:
c2:3d:dc:42:75:c7:f0:b5:02:38:f4:8b:04:78:7d:
07:24:d3:87:f2:d9:60:af:75:f1:b9:80:ee:40:40:
3f:4c:9f:7d:d5:4e:2d:81:02:d9:19:30:d8:b9:86:
27:b5:88:c0:8f:25:15:1b:e6:0f:e8:b5:46:27:0f:
31:67:4d:24:f0:00:84:87:b5:50:4e:5d:f4:93:c2:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:94:42:98:6C:CD:B4:70:BB:2B:18:40:7E:76:A7:6B:4C:E3:5D
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:32:41:be:24:e4:e7:37:dd:e4:d7:76:d7:37:92:df:d8:
42:00:d0:b4:fc:f8:18:21:bd:0b:75:cc:7f:96:4a:2f:f7:2b:
7e:89:c8:d1:18:5f:6f:02:4e:af:af:b5:fd:08:7b:c1:c7:76:
20:d4:b6:04:95:30:af:ba:10:42:f0:3c:4a:58:0a:df:d2:c6:
7e:c0:f9:53:d4:6f:80:70:6d:12:34:47:29:05:7d:de:b1:6e:
f7:a0:87:1e:6f:de:cb:07:38:e8:c6:9e:b9:92:5f:cf:e9:20:
63:63:35:38:ea:5d:dd:82:d7:72:cd:9f:7f:0f:87:da:dd:ec:
8d:e8:ec:a3:d0:b3:17:af:ed:80:a7:c9:d2:e5:54:d1:f1:0a:
87:6f:1c:ee:eb:98:8d:0c:ea:ba:71:20:c2:de:ea:fc:db:34:
f1:10:bb:72:99:a6:a5:ca:e6:45:6e:d6:84:3c:09:87:43:2f:
3b:1b:bf:b0:ac:96:c9:5e:c2:ac:9b:ff:63:c5:2e:21:05:16:
51:aa:3b:6f:92:17:ff:dc:76:43:53:03:18:4b:b0:a1:df:39:
0a:87:7c:34:41:b6:ec:be:d5:e4:b0:3e:b2:e5:80:34:47:0e:
15:35:5b:ae:00:c3:c5:84:84:30:10:8e:eb:b5:e2:ee:45:bd:
41:4d:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:37:58 2025 by rpki-client