Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: X8d7gCsqPuXUD93/jV/7GNOPmNsxK1m1n3LgN+ag9L4=
Subject key identifier: A9:6B:49:5B:73:23:E2:E1:93:11:37:BA:15:7A:04:5E:1C:76:FD:23
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 0197B933A04D4D052A0E7ECFCF25BE865930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 01:00:57 +0000
Manifest this update: Sun 29 Jun 2025 01:00:57 +0000
Manifest next update: Mon 30 Jun 2025 01:00:57 +0000
Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: lFnONHBhJPywR9eiUsYS1OvfE760ZyHnXiGsXAyNls0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:a0:4d:4d:05:2a:0e:7e:cf:cf:25:be:86:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Jun 29 01:00:57 2025 GMT
Not After : Jun 30 01:00:57 2025 GMT
Subject: CN=a96b495b7323e2e1931137ba157a045e1c76fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:3e:8e:82:59:d8:07:5e:63:68:bd:d3:e0:
90:df:e3:14:fb:31:d7:0d:49:17:ff:51:d1:ed:85:
36:7d:75:e0:4f:fd:31:d7:c6:c9:17:c3:b5:3f:e9:
dc:41:ad:4f:7b:43:52:44:9c:ee:79:bd:d1:12:3d:
23:ef:e4:21:c5:1e:cc:c3:74:95:0e:c4:48:77:25:
6f:a6:3d:d0:15:8e:de:dd:50:e1:de:77:b3:3c:65:
b3:85:40:13:0f:98:4b:15:53:e0:29:02:44:b5:8c:
7c:3e:fd:cf:92:82:bb:18:63:31:ac:f4:cf:8f:0f:
41:0e:2e:20:76:f4:61:c4:7b:6d:8d:f0:e2:0f:63:
6c:6f:52:67:f9:d0:85:da:e5:a9:6c:48:c2:46:a6:
f3:94:ff:be:86:40:4e:d0:71:d2:3f:d5:4d:c0:22:
c5:82:55:47:2b:34:25:6c:e9:8e:48:34:c4:b7:67:
09:60:e8:07:c8:e5:f9:fe:4c:49:a9:79:83:71:f9:
83:94:32:48:d2:1f:27:1a:ed:46:09:06:58:8e:bd:
ba:e9:eb:17:bb:1e:28:e3:3d:00:dd:88:2a:4c:6f:
d2:6c:b9:93:55:d9:66:8a:a0:27:5d:f2:01:ce:69:
92:bc:71:64:a1:3a:19:a5:19:20:bb:c9:4a:49:34:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:49:5B:73:23:E2:E1:93:11:37:BA:15:7A:04:5E:1C:76:FD:23
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5a:f6:47:a5:36:a4:0a:3c:c4:db:cb:6b:b3:22:06:5a:0b:
b7:0f:9a:cd:ad:54:68:ba:38:81:1d:a6:24:79:95:ff:62:f9:
b2:e3:cc:a8:f9:25:79:4a:1f:59:2d:52:f8:c9:bd:e3:14:04:
ec:0a:83:8c:24:37:34:1e:46:ba:fe:61:66:51:32:09:5b:49:
a1:03:fc:6e:cb:23:a3:7a:88:ed:38:77:e8:f2:7c:d6:19:d0:
98:04:90:70:a3:9b:ea:d5:cc:58:19:3b:8d:47:39:3e:2c:2a:
c0:8f:92:8f:b1:4f:54:db:d3:cd:27:9b:97:26:e8:fb:1d:23:
86:83:a7:bc:87:3a:2e:54:57:d8:d1:ad:c6:98:86:6f:48:96:
4c:88:ef:6e:02:5c:fe:81:f5:3e:03:8e:6f:f4:49:8d:d3:6e:
d4:5e:40:87:ee:f3:11:88:29:69:75:d4:e9:7a:e5:1b:65:49:
4a:8e:69:d3:57:86:50:c2:e5:e9:dd:a7:5e:cb:2b:d3:25:db:
af:dd:df:42:61:a0:b6:a4:da:23:0e:eb:7c:9e:13:d3:59:35:
6e:13:59:c5:12:ee:ca:d9:b7:40:8d:f3:c4:a8:01:d7:2c:f3:
b7:36:99:03:6f:06:4d:fb:74:35:0c:bf:41:c8:6b:6f:01:af:
a7:ef:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:13 2025 by rpki-client