Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: efk7oiFq4WbeUoMMssnFlFHp+GxzwpYj/WgKieOV6AI=
Subject key identifier: 39:46:70:DF:BF:C3:9B:AF:62:24:D5:9F:0C:43:FB:2C:11:A4:DD:07
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 0197B8C5DB91AF16CC9157D20446CA5FE113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0CD0
Signing time: Sat 28 Jun 2025 23:01:03 +0000
Manifest this update: Sat 28 Jun 2025 23:01:03 +0000
Manifest next update: Sun 29 Jun 2025 23:01:03 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: bZA5ySU3CiShQm2lED444AJkYn4xNmvROnvQXPG9UIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:db:91:af:16:cc:91:57:d2:04:46:ca:5f:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Jun 28 23:01:03 2025 GMT
Not After : Jun 29 23:01:03 2025 GMT
Subject: CN=394670dfbfc39baf6224d59f0c43fb2c11a4dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:7c:e3:2c:7f:57:12:f2:65:af:b3:ef:75:
21:03:22:3f:a4:32:61:61:1d:88:b8:e2:6b:30:ae:
7e:24:37:60:1f:52:c8:72:93:86:fd:b7:00:f5:bb:
b7:ee:3a:b0:51:86:01:5b:7b:7d:b0:56:e3:a6:e1:
0b:40:14:2d:81:de:28:67:72:15:4c:5f:fa:cb:48:
fb:4a:b5:8d:84:08:03:3e:98:b5:39:54:52:6b:cf:
7a:b1:6e:05:2d:d9:a8:31:9e:76:0e:c4:73:24:86:
c2:7a:17:40:86:14:af:0e:fe:da:6a:c0:02:c6:a4:
6b:e9:7d:da:c6:d6:02:b9:43:12:21:2b:f8:9f:19:
d2:72:59:a7:2b:94:c2:3b:17:79:52:55:7d:5a:e9:
c1:5d:57:d1:b5:fd:f2:49:fa:26:70:46:fe:8c:24:
50:40:b1:77:b4:34:17:6f:0e:d6:df:5c:8d:58:55:
2d:6e:2b:ea:db:57:60:e7:c4:6d:d6:14:22:33:d9:
5c:e6:b3:4a:d5:9b:11:1e:ef:4f:a1:4f:af:57:91:
59:a9:4b:2a:a2:03:df:8f:45:2d:19:9a:13:59:38:
e2:78:a7:1f:4a:c9:55:ed:95:f5:84:90:c5:af:59:
6c:4e:af:21:4c:7f:b8:fd:d5:71:58:90:d1:78:e3:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:70:DF:BF:C3:9B:AF:62:24:D5:9F:0C:43:FB:2C:11:A4:DD:07
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:59:0f:78:c6:8e:8e:71:e5:e9:a5:b6:0a:0e:67:58:94:
39:33:fb:31:51:58:e1:9d:c4:e0:66:07:b1:b1:fa:50:1f:80:
74:cc:64:c6:0f:b9:9d:59:e7:0f:c8:4d:ef:c1:b8:73:43:d9:
15:d3:e2:de:c7:b7:b4:f8:5e:ca:f4:f3:a2:24:cf:2c:62:93:
1a:b1:6f:79:59:57:a9:cc:68:59:18:1e:b2:db:8a:c1:4d:0d:
f5:3f:d1:41:50:2b:75:c1:46:cc:0c:3e:42:e1:76:76:a4:79:
97:4e:a8:01:01:2e:ae:da:43:ab:12:73:53:de:8f:1e:92:85:
bf:23:00:5d:7a:2a:b1:d7:b6:9b:d3:34:b4:ef:79:97:f6:90:
44:9f:95:27:52:4f:ad:fc:1d:aa:71:28:6f:a7:1a:6c:8d:15:
cf:1e:d9:01:25:d9:3f:0a:70:e3:ab:0c:60:d6:cf:51:67:8a:
98:76:57:e1:c2:cf:1d:0b:17:1b:f4:01:53:0e:2b:24:07:f8:
af:d4:52:a2:f0:b5:89:6e:95:61:a8:72:87:23:46:df:24:a0:
ba:9b:f6:27:a3:76:b1:4a:39:0a:24:1c:92:bf:b9:82:aa:a7:
40:27:60:0f:50:50:bb:90:e2:37:0b:ce:2d:ea:0e:34:9c:3d:
fe:db:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:35 2025 by rpki-client