Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: rLFthbRQayBVpl1Ug68Wa2BgENmauJkaHXywCfV6w+E=
Subject key identifier: C4:1C:F6:74:A7:75:15:D2:8B:FA:D5:9A:38:A5:90:B3:9B:1F:38:62
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 0197C56F4AB28D19C38B0B103B0649AE8291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 0FE3
Signing time: Tue 01 Jul 2025 10:01:34 +0000
Manifest this update: Tue 01 Jul 2025 10:01:34 +0000
Manifest next update: Wed 02 Jul 2025 10:01:34 +0000
Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: kLPhJXs2IIEooASY3FDIMxN3R+NOaSvVKS8YHOGkgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:4a:b2:8d:19:c3:8b:0b:10:3b:06:49:ae:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Jul 1 10:01:34 2025 GMT
Not After : Jul 2 10:01:34 2025 GMT
Subject: CN=c41cf674a77515d28bfad59a38a590b39b1f3862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:fb:11:88:5e:ab:1a:93:ec:e7:51:03:8d:
f1:5b:a0:4b:42:1c:53:7b:cd:2a:82:e8:81:6a:fa:
1f:18:ec:31:c2:50:8f:c5:8b:16:8d:84:b9:13:f7:
16:89:bd:d5:c4:2a:ad:84:fa:57:d2:7f:d0:57:45:
75:ce:2d:37:dc:cf:2e:09:1b:3d:c3:19:d7:c9:40:
be:a3:dc:71:6f:27:75:9b:c2:aa:de:f5:c1:33:15:
a5:ac:f7:47:e2:b2:56:a3:23:82:d6:b6:12:e0:7e:
0e:03:22:c2:73:15:9f:07:c9:7f:3b:fe:1a:74:62:
e4:33:72:b4:5a:2d:2f:77:65:0f:e8:30:17:98:81:
56:5e:ac:ba:3b:33:53:64:5d:8e:19:b0:21:c8:fd:
4c:a4:a3:e6:57:bf:68:07:6c:72:b0:eb:e7:bb:6d:
f9:83:ec:38:72:46:6f:d4:9e:9d:3f:22:23:05:22:
b3:c8:c1:f6:eb:fe:ed:82:22:8e:00:f7:cf:3d:4c:
5b:5e:af:5d:91:fa:50:79:46:a0:89:31:c5:3b:0f:
9e:54:5d:79:e8:54:c9:6d:d6:fe:9c:1a:07:2e:c7:
50:a6:f7:96:b6:4f:35:6c:30:fc:de:0a:9d:c9:d7:
52:66:57:73:3c:51:89:18:de:90:9d:f2:68:16:c5:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:F6:74:A7:75:15:D2:8B:FA:D5:9A:38:A5:90:B3:9B:1F:38:62
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:7b:af:0c:5a:7f:1a:60:c6:dc:79:1b:49:6d:d9:51:bc:
69:91:5e:75:4c:72:4f:59:4a:8e:1d:9a:3d:b1:4f:e9:1c:37:
ff:d3:83:7b:4c:a4:d8:b0:83:e8:9b:f3:b1:0c:da:3c:f0:5f:
e1:42:f5:3d:38:9a:5a:a2:a8:d1:0c:87:2c:db:51:7b:02:e7:
31:78:53:0a:e5:ed:73:66:f5:21:a4:15:17:c6:ed:54:28:98:
94:96:7b:ed:f1:e0:40:de:0c:5a:53:fe:a6:44:89:0f:1f:38:
bc:ca:b2:6f:89:7a:3f:94:b2:3e:72:fc:99:a3:36:e6:96:f6:
c8:69:64:32:9c:4c:b1:a3:67:eb:32:37:52:53:f6:24:38:69:
48:76:54:8d:98:9d:11:d4:ec:8a:b5:07:ab:26:b4:30:1d:d3:
4b:85:cf:39:66:40:8e:f1:28:3d:b7:72:d8:78:6e:e2:35:b1:
e9:3b:9e:ec:ab:fd:59:03:39:99:19:f8:3d:5f:ea:e7:2b:16:
6c:ec:25:43:d9:9c:bb:18:d4:90:98:7d:0d:f5:0e:a2:ab:6c:
6b:b3:74:f3:fe:ab:9f:59:f3:9b:ee:40:9d:68:dc:a3:19:6f:
82:d1:99:50:d5:85:fb:8d:13:26:34:a7:af:c9:1f:24:78:7a:
eb:76:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:41 2025 by rpki-client