Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: j/g3AZDzUL5itZXGbbZYUM6g8KPf2FkNdXaCBm7kQCE=
Subject key identifier: 73:B5:DB:31:26:11:1C:4A:30:54:AC:7D:67:48:50:76:A3:D0:02:34
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 0197B6D7B9C33BC43E501CCE1C990DD638E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 7DwMwexdnozOdjb9cW4toqarS7jyoIaB3b0sYFJwgIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b9:c3:3b:c4:3e:50:1c:ce:1c:99:0d:d6:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=73b5db3126111c4a3054ac7d67485076a3d00234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:a5:85:ac:67:fd:13:17:4f:55:0a:20:2e:
a2:9a:14:50:6d:54:8f:57:0c:c2:33:81:e0:5b:4c:
04:98:dd:c6:ab:cc:a9:53:da:76:40:b9:9f:98:6f:
b6:69:38:51:92:58:a6:be:37:77:a3:35:9e:c8:3f:
21:cc:db:1b:a9:92:01:66:8b:a8:bf:e0:da:6c:e1:
68:5f:c8:35:9c:b8:db:fa:d4:11:10:32:08:61:ea:
09:d6:a9:76:b1:62:e8:2f:24:2c:5e:aa:10:c7:b3:
4a:4b:92:97:64:7e:ef:2f:4c:e4:01:b3:db:59:d2:
25:7f:98:b9:0c:1f:82:9d:3e:2a:cb:60:95:be:f4:
22:47:97:42:1a:2b:a2:82:02:3b:a8:dd:dd:47:39:
c4:42:8c:74:5e:7b:4d:e6:1c:23:90:d0:b4:08:9d:
d0:e5:f5:44:ec:18:d7:0d:ba:10:2b:72:57:2c:08:
fe:b1:99:c2:38:31:b7:ce:57:8e:23:ff:aa:f7:d6:
4f:fb:9a:1b:29:87:c9:cb:22:d9:b0:b5:b6:99:4e:
55:19:65:4b:7b:5b:05:5f:cc:d8:65:e4:28:b3:1e:
2f:c0:69:0c:2d:27:03:66:6a:68:ac:68:39:f5:ff:
35:df:d1:68:e0:7f:1b:14:4e:45:74:a0:d3:70:af:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:DB:31:26:11:1C:4A:30:54:AC:7D:67:48:50:76:A3:D0:02:34
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:f2:50:fc:74:51:79:d9:fe:9f:78:8b:d3:51:70:77:e8:
89:41:cb:10:26:ad:c3:96:6f:6e:bd:b6:5e:77:b8:a5:da:9e:
d3:cc:8a:8c:ff:16:a7:f5:d2:c5:1e:5b:00:f0:3b:46:b5:cf:
62:6d:a3:eb:96:1f:81:17:1a:80:dd:00:99:71:3c:bc:9c:40:
4b:df:07:37:65:a8:30:e2:f4:08:20:1d:52:d9:e9:16:17:a9:
1b:55:72:5f:46:56:b4:79:63:85:42:32:04:cc:66:e3:4c:c5:
13:b3:e1:74:e7:ab:34:c5:fe:61:3b:21:57:d7:20:d1:8b:5b:
d7:dc:43:9f:2a:33:e3:c4:4a:6a:85:be:3d:ef:44:01:ff:7e:
fa:df:91:0c:dd:25:fd:82:20:12:00:ee:c1:c4:2a:b5:5b:df:
3a:26:56:1e:55:63:87:be:fe:e2:93:77:5c:e0:d4:a0:39:dd:
55:5c:f7:8c:c4:00:cb:75:57:e3:e2:f4:fd:52:80:3b:b7:7a:
39:b9:c0:4e:09:52:4f:c9:4a:28:fe:58:6c:26:d7:71:4f:43:
8c:c2:2f:d8:d5:a0:69:91:94:aa:be:5a:d3:1c:e4:6a:57:28:
ae:74:cf:a2:15:e1:9c:88:ad:e7:ea:5b:37:83:3b:0f:26:1f:
e5:ec:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:04 2025 by rpki-client