Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: Vx/5DT2oegXeWe+jixapU4A/ynzK6g2DXIkRaUEzPtk=
Subject key identifier: B0:AB:9E:3E:4D:F3:75:77:E6:ED:04:CA:D6:73:8D:67:90:EA:E7:37
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0197B8FD57F5D7DD8FBF7A1AE27E3922EDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1546
Signing time: Sun 29 Jun 2025 00:01:40 +0000
Manifest this update: Sun 29 Jun 2025 00:01:40 +0000
Manifest next update: Mon 30 Jun 2025 00:01:40 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 6tz1I3289834T+WFFT4ozhW142bAhh2cS2TRj35dTJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:57:f5:d7:dd:8f:bf:7a:1a:e2:7e:39:22:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jun 29 00:01:40 2025 GMT
Not After : Jun 30 00:01:40 2025 GMT
Subject: CN=b0ab9e3e4df37577e6ed04cad6738d6790eae737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ab:be:88:5d:ee:6e:cd:b3:12:02:61:82:
1e:6d:8b:f3:dd:1d:47:25:0b:7d:0d:8c:73:06:3e:
a2:3f:53:b1:f3:35:03:66:db:ee:1e:d6:18:4a:34:
17:12:8e:87:92:d9:bb:76:dc:d8:15:91:f6:1e:27:
45:c3:ae:9f:f7:7e:f0:fc:b9:13:0f:df:12:a8:ca:
f4:92:a7:63:8a:b8:18:2a:4b:a6:10:db:79:27:ff:
40:df:37:9d:c7:42:0b:cb:1e:25:e4:43:9d:02:f1:
2b:c1:cc:8e:1c:44:0a:c7:ad:00:38:80:da:b2:5f:
32:86:50:e7:cb:b4:5f:85:1e:f7:ba:81:a1:43:47:
8f:77:d5:7c:08:9e:f0:ba:78:8b:f7:c3:5d:40:5a:
06:fe:66:c3:79:33:1d:f1:3d:da:ae:14:cf:c0:7b:
61:04:ed:6f:d0:3a:56:1d:62:c3:f3:3f:c8:d2:cd:
1b:72:52:a3:b7:26:11:57:02:5b:53:4d:6b:0d:4b:
c9:a5:81:22:f0:dd:8f:ef:24:c7:4b:9d:14:c7:b2:
85:19:f8:51:78:24:c7:ed:09:40:da:79:96:0d:ed:
7d:f5:5a:1a:73:3d:e1:83:dc:e8:d1:71:ac:74:3a:
ef:b5:38:63:41:fb:42:ee:8e:1c:d5:d9:f2:21:a3:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:9E:3E:4D:F3:75:77:E6:ED:04:CA:D6:73:8D:67:90:EA:E7:37
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e9:6e:0c:30:59:34:ae:32:06:01:db:cd:ee:3d:8d:57:64:
4f:a9:44:f2:e9:8a:aa:9d:6b:7a:e5:38:d7:06:98:9a:15:bd:
96:3f:68:41:cd:1b:b4:55:7a:7c:92:89:1c:ac:c9:22:a2:76:
3c:65:ab:e4:de:98:18:eb:b1:a4:45:f6:c9:53:e7:5b:d6:32:
58:82:2c:49:00:14:1e:49:80:64:03:90:d4:cc:d1:87:ed:8b:
5a:59:cc:8d:aa:cf:8c:1b:96:bd:5d:b8:d6:e3:e2:1f:10:a2:
99:67:0b:c9:a6:81:aa:18:45:0a:54:03:6c:ef:f5:52:fa:6f:
5a:21:42:79:11:ba:f7:42:14:8f:20:64:29:bc:fe:e6:79:99:
a2:08:59:d6:22:00:7e:3b:78:df:9e:e5:04:c8:5b:dd:1b:82:
27:a6:36:58:e8:6c:48:27:c7:fc:dc:6c:fc:6a:71:1d:dd:9d:
b7:ce:da:ad:b2:5a:1d:8a:0e:49:01:a5:af:c4:49:ab:38:45:
8e:3d:37:a2:2c:2b:5f:22:ed:6c:25:f2:e0:1a:86:19:b5:94:
b8:31:06:26:b2:b2:34:91:bf:ad:17:c0:4a:3e:77:06:86:a2:
06:19:ab:20:1c:6c:22:23:fa:9b:fd:bb:a1:93:49:7c:5a:fb:
19:8b:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:09 2025 by rpki-client