Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: vE0Rjd+rjcwYhzkSv0KH2RVn8zH6frDtKtRWC12GBXw=
Subject key identifier: 1C:B1:E0:9C:7A:B8:D8:29:BC:8F:F6:5C:62:6D:8F:F3:FB:D9:4A:1F
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 0197B9336EC7E0741D85B569AD29657E821B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 01:00:45 +0000
Manifest this update: Sun 29 Jun 2025 01:00:45 +0000
Manifest next update: Mon 30 Jun 2025 01:00:45 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: 9zwL5Z+a9YJaypGq/bL6GwTXfcXsy+twHgLIbKAtsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:6e:c7:e0:74:1d:85:b5:69:ad:29:65:7e:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jun 29 01:00:45 2025 GMT
Not After : Jun 30 01:00:45 2025 GMT
Subject: CN=1cb1e09c7ab8d829bc8ff65c626d8ff3fbd94a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:9c:f7:d7:d2:7e:58:c9:54:ef:1d:af:d4:
34:29:8f:a7:9c:d0:d1:13:dd:47:04:62:61:f4:98:
73:75:bc:9e:75:b1:d2:20:55:ee:f0:4f:e8:15:ab:
29:52:00:3e:9a:a6:06:3e:1c:cb:13:19:5b:ce:86:
7b:42:7b:c5:c8:01:e1:54:16:31:fa:64:e5:1d:7b:
04:6b:0c:22:6e:af:31:96:e9:07:83:18:32:94:2a:
ee:5b:8f:54:8f:82:29:0f:43:fc:e7:68:32:28:92:
db:ed:94:2a:a0:f8:a7:cd:6f:e3:f8:d9:01:75:df:
06:2c:22:3f:86:39:fa:6b:af:80:88:13:53:97:9a:
53:6b:43:f9:02:ca:0d:44:7a:b1:a1:1a:ec:a0:0f:
bb:82:d7:2e:a3:a9:01:25:05:92:77:f4:95:a3:3b:
28:4a:71:7b:da:94:8f:70:05:c0:ba:3b:3b:cb:f6:
dc:1c:3f:48:c7:ea:63:cd:5d:7e:d8:19:17:2b:1c:
4f:a1:76:8f:e0:63:ed:f6:67:4f:88:4c:6a:12:1e:
99:7c:b5:7c:06:90:b2:96:3c:83:56:29:cf:70:4d:
5a:b2:95:60:cf:d6:43:46:e3:d6:7e:a0:85:de:19:
8a:e6:5d:23:ff:1a:99:17:38:60:c2:be:a5:c7:13:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:E0:9C:7A:B8:D8:29:BC:8F:F6:5C:62:6D:8F:F3:FB:D9:4A:1F
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f0:8b:fb:6f:27:85:b7:47:f6:73:14:e5:90:36:52:f6:19:
52:fa:ac:8a:66:70:74:e0:0b:ad:a3:55:43:60:e9:02:73:5b:
6d:5a:1c:a0:91:02:34:fa:6d:bf:3a:6f:b7:c9:ad:1a:dc:61:
7e:50:11:e4:58:79:bf:f3:82:13:ff:cd:a9:28:c5:da:d0:94:
38:2b:f1:9f:80:08:5d:7e:0d:53:30:f1:80:71:a9:a9:59:7b:
a7:b4:74:5b:55:f5:a9:09:41:bc:87:c4:fe:66:8e:1c:75:fb:
59:88:2d:2a:e8:e4:c6:94:93:1d:76:68:bf:48:c0:ee:d3:6c:
6d:2f:f1:c2:ff:e2:4f:13:68:1e:c5:6d:3f:72:95:e6:7f:9d:
68:20:1b:50:ae:01:1a:2e:55:be:1e:0e:74:4c:02:c0:ac:8c:
e0:26:3f:ae:6f:e3:1b:86:fa:0e:89:3f:49:31:94:b4:61:72:
77:f9:c1:6b:44:59:9a:53:9d:cb:b7:37:c5:a6:9e:44:3e:43:
13:6e:ac:bc:0e:25:db:53:da:0b:e1:08:ff:ba:0c:76:52:b5:
d0:97:c5:b0:e6:46:3f:2e:7f:00:42:99:93:43:93:fd:aa:21:
ab:45:76:84:1d:24:93:46:8f:98:25:50:a0:18:ce:30:94:b6:
58:97:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:52 2025 by rpki-client