Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: jKk9fqLNHqnYrNlvu3m7z+9sRv/XAk/dM2rY+75h7EA=
Subject key identifier: AB:79:28:A6:BE:AC:DA:46:7A:22:06:78:4D:87:1C:64:7F:12:91:AC
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 0197B632D6540D475C5111ECE4F50C06881F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 11:01:14 +0000
Manifest this update: Sat 28 Jun 2025 11:01:14 +0000
Manifest next update: Sun 29 Jun 2025 11:01:14 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: ZMJEEvBFYYDA59vX8FGHRJq4rIWc/RKbpHb/Z3hhtrk=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d6:54:0d:47:5c:51:11:ec:e4:f5:0c:06:88:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jun 28 11:01:14 2025 GMT
Not After : Jun 29 11:01:14 2025 GMT
Subject: CN=ab7928a6beacda467a2206784d871c647f1291ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:7e:97:b6:d0:68:7a:c6:82:6a:22:d0:41:
10:2d:5c:44:b9:17:c7:0c:9c:3c:6d:3f:d3:9a:42:
af:0e:00:28:5a:c8:17:d1:e7:c9:06:04:0a:f6:9b:
2e:86:e5:e4:03:10:7d:55:ad:8c:3a:81:2e:0b:3a:
ba:1d:63:78:87:a0:e5:70:e2:93:5f:09:f9:9b:3b:
d0:9a:05:b6:ed:0b:f0:0c:d1:98:a5:91:d7:a9:5c:
84:f3:37:d8:b7:8c:9f:5a:74:2a:4f:60:72:15:5a:
cb:9d:cc:33:5f:ee:e0:a0:c0:15:f5:4f:13:17:8b:
b2:0c:e3:26:3f:dc:2e:32:71:24:6c:24:db:98:b0:
26:db:b9:aa:d9:16:f6:d9:31:b0:c0:d0:05:4a:dc:
4b:0e:df:33:aa:bf:d3:d5:f1:97:75:72:a6:0c:1e:
bc:a3:9e:bb:21:da:4b:ab:ba:b0:4b:06:99:8f:dd:
75:43:75:29:4c:53:73:1d:cc:f5:38:ce:ec:7c:1a:
2f:60:e1:c3:55:b6:76:a8:9d:dd:22:e4:0d:44:97:
40:b8:83:d3:60:c5:eb:c5:62:98:54:55:b3:9f:52:
29:d5:b5:cc:c9:6d:77:6f:b6:cd:78:d0:6f:5e:e1:
2f:02:f6:50:37:de:df:27:78:67:59:d4:1c:19:90:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:28:A6:BE:AC:DA:46:7A:22:06:78:4D:87:1C:64:7F:12:91:AC
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:1b:1d:03:e3:47:04:4c:d8:bc:25:57:f9:a2:50:24:bd:
94:44:89:d9:54:b4:60:59:61:11:2c:cb:91:6f:fc:e9:50:c3:
99:6a:a1:0e:e4:24:55:20:f0:33:80:e6:1d:1e:f1:ff:e5:22:
e0:48:e9:c3:d5:a7:0e:e0:3c:f0:a4:4c:ad:4e:00:fb:32:65:
bd:f1:22:51:3e:f2:5d:8a:76:4b:83:9e:62:3e:5d:e8:e3:cc:
f6:42:99:e8:73:ce:c4:b3:68:3c:3a:ea:86:0c:d3:2d:b1:ab:
d1:62:93:a0:19:cd:33:9c:31:91:38:b8:52:03:93:b7:77:16:
f3:6c:5c:fd:fa:10:e1:26:1c:b6:08:53:2a:91:d2:b2:89:0e:
0a:dd:2d:b3:04:44:9c:d9:e1:94:55:12:a8:a0:ea:32:61:16:
92:ea:77:f9:99:a3:31:ec:ea:31:ba:4b:f5:f8:b5:65:37:b4:
cf:a4:18:3a:0b:f4:01:88:a8:02:85:a5:bd:61:1a:05:c9:9e:
68:d7:87:46:e5:23:09:87:8a:d1:58:ce:25:31:11:8e:1e:ff:
7e:9e:6a:f6:57:6d:19:ce:b6:fa:a3:35:e5:a1:b8:07:ca:f7:
6d:8c:82:84:9d:c8:cf:2b:75:f5:71:06:50:ae:e2:2f:72:ec:
ba:f4:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:18 2025 by rpki-client