Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: fymUNblTcyu7FjXgPYxscMtctQjfuGc3QgGqZBpCLj0=
Subject key identifier: 2B:F5:A9:87:4E:03:E8:0A:6C:EB:A2:ED:6B:5F:41:DB:5B:79:97:BE
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 0197B7EAADE08DC36AC114A4C194F602790E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 7P5O2k9fRBiic9fXqoftgb31/EU2HJJxbgJlRXAOn40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ad:e0:8d:c3:6a:c1:14:a4:c1:94:f6:02:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=2bf5a9874e03e80a6ceba2ed6b5f41db5b7997be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1a:4a:07:d9:31:1e:d8:82:1c:d8:29:88:e9:
cd:f2:36:85:03:83:b0:1a:17:c0:f7:63:67:0a:31:
38:25:bd:de:13:e6:f1:e4:ac:f1:ca:13:12:e9:1d:
38:d9:35:1e:3d:95:19:3d:2a:b3:cf:ee:bf:36:50:
4b:0c:eb:d0:ff:3e:e3:64:93:c9:1b:49:ac:a4:fd:
e2:62:99:4b:23:59:9c:a1:6c:c3:21:30:cd:5a:ed:
4b:64:c7:90:8a:95:4f:46:77:ff:0f:d1:53:78:d4:
e9:40:7e:3a:55:5c:53:19:00:c1:1a:82:02:69:41:
9d:df:15:41:45:2b:59:9f:21:9c:bb:59:c5:3e:4a:
bf:a3:c7:96:d2:9f:24:54:cd:fb:ec:af:4e:2f:2e:
67:ea:6d:9d:8c:e0:fe:cc:49:5d:ff:6b:1c:98:f1:
28:f2:d8:9c:2d:ef:de:64:02:98:77:79:90:62:97:
c2:c8:e6:0e:7c:b7:39:ad:ee:04:72:91:f7:2e:12:
88:97:50:3d:8a:1d:5b:bd:b0:ae:03:aa:cf:eb:55:
9e:2e:71:f7:ac:1f:0c:9c:6a:7f:ad:14:9c:82:43:
53:98:ef:c3:21:61:a2:8e:97:f8:20:c1:a5:d8:a5:
8c:11:3e:ed:4a:fd:79:08:41:5e:19:51:e2:9e:7a:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:A9:87:4E:03:E8:0A:6C:EB:A2:ED:6B:5F:41:DB:5B:79:97:BE
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ca:c4:88:a9:cb:e5:73:21:ab:c2:e2:0d:81:89:8c:1a:9a:
33:0a:73:92:cd:9b:c7:38:4b:26:b9:17:33:73:e5:b7:f2:32:
83:5c:f2:e1:c7:25:d7:b2:ae:95:58:7c:9a:17:3b:ae:e7:73:
8e:04:f4:f5:36:9b:43:ca:8f:67:6d:7d:49:fe:74:88:2c:49:
66:91:2d:3c:e7:ec:c7:19:21:8e:06:b9:ce:46:d8:51:b8:f0:
cd:f5:55:b4:14:a0:85:fd:27:2f:76:72:53:5b:5f:8c:45:4c:
b0:7a:a3:7e:18:bc:5a:ec:e9:c7:1f:83:0e:09:51:16:96:1a:
93:85:e6:dc:fc:bc:63:e0:42:9b:f8:9b:33:cd:4b:2e:22:51:
89:d2:5c:83:ce:dc:47:11:0b:c9:22:5e:fa:d3:e1:44:54:94:
4a:0e:08:10:76:65:6b:d5:e7:a7:6c:42:2a:36:c9:c6:0c:94:
2b:e5:5b:84:b6:67:fb:15:53:ff:7b:68:ed:ff:1e:6e:de:7f:
58:60:be:da:f8:7a:28:96:42:00:80:ea:5e:cb:16:e3:9b:fa:
ec:17:39:35:3f:1d:51:45:be:ae:d4:b4:c4:a3:37:a4:c7:55:
15:2e:a9:6e:85:34:3d:1c:fc:95:1e:af:d8:f2:56:d5:4c:06:
2f:c8:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:23 2025 by rpki-client