Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: rBIU3FiZ0075LIBBDq9WjDkzhNa7b+mAJjTtp4dLAfQ=
Subject key identifier: A4:B7:C8:7B:53:44:23:BF:EA:7E:A9:10:E5:86:21:EE:CD:07:F7:58
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0197B8FCBE69FB39F93AF49AFBA60227EFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1359
Signing time: Sun 29 Jun 2025 00:01:00 +0000
Manifest this update: Sun 29 Jun 2025 00:01:00 +0000
Manifest next update: Mon 30 Jun 2025 00:01:00 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: U2jq0nNDfg8Kvkt4qyz3dMydJXCnIuvnS+4nNVNZ8dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:be:69:fb:39:f9:3a:f4:9a:fb:a6:02:27:ef:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 29 00:01:00 2025 GMT
Not After : Jun 30 00:01:00 2025 GMT
Subject: CN=a4b7c87b534423bfea7ea910e58621eecd07f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:82:b0:cd:c9:3d:e1:0e:11:85:43:c0:14:
24:cd:d3:da:11:8a:00:67:f6:c0:f9:ee:81:ef:0d:
69:0f:68:ec:de:aa:aa:d8:36:fc:59:11:19:67:b1:
00:5a:dc:7d:ba:7c:96:11:12:36:e2:2a:d6:c8:5b:
33:1b:43:a8:ed:f6:9f:41:3f:2a:bd:8c:6a:c0:6c:
d1:bf:3e:68:85:9c:f7:ff:f0:be:3f:60:7d:d3:63:
bf:60:4e:41:d0:44:5c:9b:13:c7:97:0c:c7:af:c1:
ba:79:df:65:b1:ad:18:7c:79:f3:d8:9d:78:6f:73:
c7:5f:b6:7a:8f:45:bd:6c:5a:3b:f1:49:47:87:7e:
9d:aa:e6:0c:0e:6d:06:78:ea:46:0a:df:03:28:88:
3f:09:a4:09:15:21:27:8a:fc:93:4c:56:c1:f5:b9:
82:7a:7f:26:aa:f6:44:ed:87:97:72:9c:bc:58:7c:
d1:0e:fc:7b:9e:53:54:b8:8a:99:4f:16:b9:15:03:
c6:9e:a4:9b:38:c7:61:ea:8e:a1:38:2f:77:85:17:
0b:6d:c0:74:ac:1b:4a:a8:6e:a7:e1:d0:86:61:ef:
7a:10:a3:09:5f:99:7e:a0:44:67:76:6a:ca:7d:5a:
d3:13:70:16:0f:29:5b:bc:b3:45:2f:91:fd:2a:70:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:C8:7B:53:44:23:BF:EA:7E:A9:10:E5:86:21:EE:CD:07:F7:58
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:bf:4b:dc:bc:0b:2a:d8:0e:23:ec:9e:c4:d3:4b:d6:57:d3:
a3:1d:b0:27:07:bf:a0:f1:ea:c3:82:b4:65:ec:72:0d:f4:60:
86:e0:ee:19:f6:18:db:b4:2c:52:25:dc:45:65:4d:94:ef:55:
e3:44:e4:5a:e7:a9:5f:82:41:b8:7c:c3:ab:a1:38:8e:dc:3c:
c0:4e:bd:b1:fd:07:d2:a5:d8:9a:a7:5a:de:11:24:73:de:5b:
4a:ee:2e:53:8a:9f:9c:cd:85:8e:70:ff:53:53:5c:39:39:4f:
48:62:c0:ca:f8:88:92:37:cd:b8:d4:15:df:d8:a5:0c:d9:a5:
fe:27:bc:6d:6e:58:89:2f:0f:fd:f8:e6:69:5c:01:49:24:40:
c1:76:20:8c:e3:e1:04:0a:44:fc:2c:03:34:4d:4f:57:f8:38:
21:8f:91:f2:1f:2b:ee:9f:f7:73:86:f6:3c:61:a8:cb:89:a6:
0b:53:4d:f5:c5:52:22:f1:cd:ed:4d:f3:f2:a3:6b:cc:b6:33:
7b:fc:a6:08:9c:ea:7e:d4:bd:86:ff:1d:42:cf:bb:ad:4b:a1:
62:e3:78:7a:9c:85:ce:41:eb:4e:1c:f5:7f:97:04:ff:00:20:
18:aa:27:f9:92:b8:c4:69:82:b2:84:d3:bd:85:d4:e8:e6:34:
c5:59:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:50:56 2025 by rpki-client