Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: 4tyuu6dhIkX/M3qzPo+PCINN3m9p2fbFz9mSqZKzB84=
Subject key identifier: 63:0E:C7:09:D8:34:CA:6F:04:3A:A7:F7:DD:6F:EA:A7:21:47:95:95
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 0197B820CFFEB3251F478CC0F7F6F2DDB56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: EsnRCcXzlaJpRg3g4qelosFRj6ClLW0zder7zzS+vDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cf:fe:b3:25:1f:47:8c:c0:f7:f6:f2:dd:b5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=630ec709d834ca6f043aa7f7dd6feaa721479595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:f7:61:f3:58:4b:94:bb:78:cb:b1:f6:b6:
10:7b:73:05:4f:49:a7:0f:7b:e0:c2:9e:f9:3c:b4:
43:f7:84:ec:e1:62:c6:1f:7f:29:7a:ff:7e:83:82:
47:89:b5:db:bb:f4:78:59:08:12:cc:6b:67:29:be:
65:4d:67:5a:11:47:a0:d6:9f:07:50:e8:f6:dd:d8:
2a:52:4d:05:e6:13:68:41:82:35:c0:ef:d5:e0:4e:
05:a5:78:f6:fb:e4:9a:62:16:9f:e4:74:62:a3:91:
b8:4e:4f:d9:ae:67:29:ac:0e:0f:55:1b:d2:94:d3:
eb:55:5c:40:1e:96:a7:83:ab:5e:2a:91:1a:96:94:
0c:2f:78:50:e6:d9:5d:e7:71:95:66:98:63:d4:63:
4e:88:8b:a0:e4:7b:4c:51:85:d6:4a:0e:f4:ad:f5:
29:61:9c:5d:97:aa:35:ec:26:42:f8:06:ef:09:f8:
01:68:d3:ba:4b:de:cf:fa:b5:21:56:43:fa:f7:45:
97:79:f1:41:2a:0b:2b:a3:4f:39:a9:2c:6c:42:74:
57:1a:b1:06:54:aa:6c:ce:45:2f:f5:35:a8:9a:4b:
ea:7e:e8:7f:48:7f:87:b1:d7:65:c7:34:08:32:77:
ae:37:7b:10:af:aa:bb:ac:97:dd:90:6d:70:25:b0:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:C7:09:D8:34:CA:6F:04:3A:A7:F7:DD:6F:EA:A7:21:47:95:95
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2a:67:ea:56:bd:1a:89:25:f2:07:96:28:8e:09:1d:36:7e:
9e:13:4c:72:03:c6:64:5b:e2:a5:c2:2c:79:5d:82:23:2d:85:
0c:3b:a1:06:12:24:9f:80:a9:a7:04:0b:b0:a3:7c:b9:60:60:
53:f8:f4:6f:a7:96:e6:83:37:c3:83:3b:c2:c5:d5:de:49:a5:
cd:08:18:43:9a:c7:9d:3a:d7:27:fd:99:78:1a:46:41:73:47:
4c:60:af:68:14:17:a3:cb:3f:ad:99:55:50:f4:d2:73:73:b9:
32:87:e7:77:dd:ce:fc:c9:95:00:5c:66:9b:1f:c4:fa:30:ed:
51:e2:b8:7e:80:03:ce:6a:6f:0c:8d:a8:48:af:a0:91:b5:ec:
2b:82:8d:c6:ee:da:bb:ee:a6:8e:81:e4:ae:bf:0d:9f:b9:34:
08:68:2e:c1:82:23:d8:c1:ab:09:d9:9e:c6:81:21:89:3e:7c:
04:d9:19:a4:af:96:77:e6:ec:0e:db:40:0b:98:e1:32:e3:5f:
17:96:ce:6f:8a:b0:cb:a3:53:9e:6a:4e:d8:e0:64:12:8f:65:
41:62:58:b7:89:b4:89:da:b5:83:27:7d:b0:6f:72:5d:14:8e:
ef:f3:e1:10:ba:b8:43:58:0f:ec:70:36:55:d4:fa:43:76:88:
d2:46:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:40 2025 by rpki-client