Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: NUFt08RFo4bCbNezMBsWwmRAhlHpkGpYazpWrZ+shC4=
Subject key identifier: 69:4A:F7:D0:D5:E2:89:12:AB:2C:7E:DA:EE:94:10:EC:8D:32:C2:CD
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 0197B6A23EC793715EA3D8E87E540AE9D15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 1541
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: L1wVG1yWLuOCnrUqf8KvusIi2XlDoh2QaEH6Ch1TLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3e:c7:93:71:5e:a3:d8:e8:7e:54:0a:e9:d1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=694af7d0d5e28912ab2c7edaee9410ec8d32c2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:55:70:7b:c0:33:89:ac:9f:23:cb:f0:17:
97:ea:d7:dd:73:c0:e2:cc:fc:80:cf:61:44:76:b3:
85:7d:eb:9f:84:8a:cb:a6:72:c6:30:ef:16:3c:8f:
9f:52:bc:50:8f:a3:a0:fc:88:ff:60:dc:48:52:9b:
65:3f:78:1c:53:c0:ea:90:29:70:4e:e8:39:dc:10:
a7:a0:91:3f:bf:d2:03:ad:70:6a:20:d8:ac:6d:83:
1f:ab:55:54:82:87:85:75:0e:33:ec:c7:d8:37:87:
e9:bf:8e:db:cd:9f:ca:a5:a5:69:bf:65:88:f6:f9:
0b:b0:1e:a0:ae:ab:60:2f:f8:4f:1c:1c:f7:50:86:
b6:f2:66:5f:cd:d5:2f:35:38:8d:b8:52:f9:bb:13:
7d:66:38:20:3d:c7:07:24:6d:3c:ea:61:77:89:08:
c3:b0:5f:bc:08:ca:b0:22:5b:27:83:bc:8f:00:24:
23:30:8b:86:2f:1e:6c:0e:0c:89:cf:c1:28:58:81:
8d:00:1e:64:e5:44:56:14:19:94:3c:46:b6:d2:ac:
8a:3d:a6:3d:54:51:f3:dd:b3:e1:ef:95:a2:cf:11:
5f:21:5d:33:71:31:52:ca:97:c0:12:70:89:fb:75:
79:e2:9d:e9:c4:bd:8d:02:f8:13:1e:ce:41:a2:b8:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:F7:D0:D5:E2:89:12:AB:2C:7E:DA:EE:94:10:EC:8D:32:C2:CD
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:ea:9d:7a:22:c0:81:50:f6:45:7e:11:99:77:71:9a:0c:
d2:02:99:37:c8:ac:52:e6:9f:00:be:9f:22:dc:03:9a:5a:e9:
ad:42:e4:88:6d:2b:e6:1d:87:13:c4:1a:5d:2b:c7:4f:48:0f:
a9:72:20:73:b6:a2:fa:f6:d2:d7:5f:27:7e:8e:ca:fa:10:56:
c0:7a:53:5f:54:7c:c8:64:d0:20:6a:8f:64:fb:bc:8c:1a:9f:
c0:62:94:6b:d2:81:95:35:9a:a3:67:76:ad:7f:ac:f1:5e:6b:
9d:24:a9:78:65:7a:39:cc:bc:91:f8:2d:a0:66:59:00:6e:08:
6c:3c:e8:5c:7a:74:74:13:77:c1:d0:46:c5:5f:29:19:26:ee:
54:37:c7:03:ab:cd:70:0c:e9:ac:9c:6d:0c:60:98:3b:59:d4:
67:09:2e:70:8c:49:a6:a6:20:9e:3d:b1:df:e7:36:32:b8:6d:
f4:e9:d2:e6:ab:e6:21:71:31:66:af:c7:b6:e9:3c:32:0b:47:
4e:3a:8c:1d:65:4a:f8:ba:0b:e1:db:94:2f:02:18:53:0a:7d:
d7:5d:2f:33:c7:96:51:93:ee:a9:f1:10:3a:1f:8c:3d:99:ae:
3f:41:fe:4f:12:8f:35:c9:56:06:df:80:1a:37:79:79:64:a3:
a0:75:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:19 2025 by rpki-client