Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: GWzMtAze+Xf4M092GwS7mP1VTixc247Rhzol8ili4ik=
Subject key identifier: 0D:8C:38:E5:8D:DE:AC:D9:30:88:FE:FC:43:9E:F8:E4:7B:83:5F:5B
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 0197B7EA6B3DC4D60E6FD4AF15C8142B69B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 03FC
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: ogMcVCdI8E9IYUgay6/x91N+q08yKvDpRHBAba3nBrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6b:3d:c4:d6:0e:6f:d4:af:15:c8:14:2b:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=0d8c38e58ddeacd93088fefc439ef8e47b835f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:05:b4:5d:15:b4:65:90:f4:bf:6f:56:60:
76:9a:3b:3b:4a:42:29:51:96:87:e2:69:15:a6:05:
06:b4:8a:45:f8:ef:d1:57:8d:5c:5d:21:ed:10:41:
74:86:aa:12:d4:8d:a7:a1:82:c4:d9:ab:56:aa:98:
98:cb:27:fc:54:85:71:ac:97:a6:fa:58:f3:1a:3a:
59:24:40:75:e3:d5:5b:83:04:86:91:f8:f6:92:0e:
14:d8:70:a5:cd:32:0d:dd:44:ae:2a:26:74:a9:b0:
5e:d5:61:93:5d:42:66:57:09:6b:4b:69:11:8b:ff:
79:81:14:5e:f7:3e:70:84:0d:7c:25:69:53:37:02:
c0:f1:a5:de:43:c5:4f:52:7a:d7:70:7c:0c:91:eb:
84:e2:3c:d6:68:7f:8f:ba:0f:e8:c1:4d:d5:d1:98:
e7:50:a8:80:6a:32:9a:42:88:47:24:59:69:41:4e:
e6:39:79:d4:83:67:86:90:25:a9:e1:9e:ee:5a:08:
8a:1b:fd:e0:d7:1d:41:a5:9f:6c:61:0b:e6:c6:ed:
05:1a:2b:b0:b5:cb:d7:3c:da:24:cf:49:34:30:29:
f6:8e:ac:04:15:7a:aa:e8:ca:4e:88:ce:06:0d:00:
cb:d2:71:0e:e9:4b:5d:3b:3f:07:e1:f1:73:5d:07:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8C:38:E5:8D:DE:AC:D9:30:88:FE:FC:43:9E:F8:E4:7B:83:5F:5B
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8e:eb:02:13:9d:57:90:90:a1:63:3b:5d:48:63:1a:0f:8c:
0e:9e:b8:de:cf:7c:42:35:e8:46:07:8e:fc:4b:75:24:00:10:
4d:a1:e0:ca:4e:c2:cb:6a:68:9b:ea:0b:65:8b:eb:ec:1f:f3:
45:49:66:d6:19:39:fd:4a:79:f0:0c:1a:e4:32:d7:de:c2:d2:
6f:c0:e0:89:6c:0a:97:e6:8c:43:85:13:e8:a5:ab:68:bb:3f:
e0:fa:bd:bc:6a:f2:ce:b8:0d:08:b2:4b:b2:e8:06:91:2a:b8:
3f:01:9d:20:0f:37:06:3f:86:d2:c5:c2:05:67:8c:22:35:14:
80:73:f5:70:78:a5:7c:44:c5:da:42:76:71:bb:37:3a:57:06:
58:fa:b2:bd:fd:39:eb:3d:73:94:34:35:4b:2b:85:42:84:eb:
36:63:49:d5:7a:e7:dc:86:ec:c8:1f:c2:69:ce:ba:bf:e7:f7:
ec:56:b8:6f:42:af:1f:9b:58:35:8d:03:51:ab:8c:74:aa:8a:
f7:75:4f:00:be:43:28:fd:a8:9f:a5:c1:45:b2:7e:a4:2b:0c:
d9:c3:ca:6b:62:fc:24:8a:21:55:70:f2:09:53:d7:f7:e8:02:
df:65:c2:64:88:5a:be:be:1d:ef:ea:bb:79:9e:b8:c7:6d:54:
0c:59:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:45 2025 by rpki-client