Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
File: Lw47dY4ki4AfwfMNNF1giwevG_Y.mft (raw, json)
Hash identifier: nTIcJ7Ql4Q52vHeVRIowxpkVxuWCflXC4OoITWdwqzw=
Subject key identifier: F6:C0:B2:0E:D0:FB:65:6E:32:40:D2:1B:C1:40:E5:BD:9E:48:B8:B5
Authority key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Certificate issuer: /CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Certificate serial: 0197B70E61D1DA66F67DFB0089E88FE38E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
Manifest number: 05DB
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: Lw47dY4ki4AfwfMNNF1giwevG_Y.crl (hash: fYItixbg8SJ3ZPh3NwJ9SbPsvylIsNtQmlZrhlXgmfI=)
2: MBtZdpS4ymxgginyDhvfCoGQ29s.roa (hash: Taga/JoIPOZ2TxBr6cVw0HmmUo2VGq5/DtsPjFffmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:61:d1:da:66:f6:7d:fb:00:89:e8:8f:e3:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=f6c0b20ed0fb656e3240d21bc140e5bd9e48b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:97:cc:be:d6:fa:3b:e5:4a:7c:5b:13:1a:
38:67:50:87:c2:8b:5e:02:8c:4f:a5:cf:86:c7:6d:
71:88:12:84:76:5b:e2:f7:3f:6d:64:db:c1:cd:8a:
5d:8a:cf:b1:d4:19:02:15:17:c6:53:33:63:d5:74:
62:32:99:04:fe:81:b9:e8:e5:2f:d4:f1:ba:a9:83:
e0:e1:8f:11:e8:f4:cf:01:e3:ac:62:f2:dc:a9:e1:
6a:2d:e6:80:54:5c:65:b0:53:3d:bf:ae:b2:ea:64:
d4:56:b6:64:95:67:46:fa:a2:9b:bd:55:1a:73:76:
d9:67:e4:bf:0c:35:82:41:60:52:3d:3c:25:d6:b4:
a8:20:fe:76:6e:91:7d:7d:47:df:b2:3f:ca:86:0e:
7e:05:89:05:be:57:f0:d6:21:db:13:a9:fb:17:00:
25:14:74:f6:a9:94:1d:f2:7d:3e:e9:95:1f:19:f1:
d7:22:12:09:25:39:4d:24:14:55:fd:26:75:f7:7f:
e7:b9:49:09:96:6d:50:e2:25:36:e3:24:24:95:83:
d8:a8:88:00:26:f8:1c:c2:66:27:f8:58:a9:f8:59:
7c:11:c4:4a:1f:22:a9:22:52:06:a8:d8:9b:4e:29:
03:50:4d:58:52:4e:08:b6:a4:6e:03:0d:aa:d9:83:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:B2:0E:D0:FB:65:6E:32:40:D2:1B:C1:40:E5:BD:9E:48:B8:B5
X509v3 Authority Key Identifier:
keyid:2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:47:43:8b:f5:cf:6e:36:76:3d:a1:69:d0:54:39:ee:92:
33:22:2a:88:24:0d:f5:a7:77:ed:ba:66:23:b8:ef:7d:3f:01:
3a:da:c5:13:94:c6:dd:58:2e:db:fa:0a:ed:65:22:fd:a9:3e:
28:9a:7b:44:4b:f8:d1:8d:61:91:65:56:84:6a:6b:e3:75:10:
ac:45:29:f3:ad:8d:2f:c0:58:75:3f:3a:d9:95:36:b7:fb:ec:
e1:65:e2:0b:64:07:66:1c:d1:b2:15:3e:65:11:f5:97:b0:27:
e2:fc:a1:99:5d:bd:3a:8a:b7:25:ce:1b:b5:d5:b9:20:7e:d7:
5f:c7:f4:5e:55:2d:29:b3:eb:b0:a8:af:f0:17:3c:fe:cb:17:
b1:18:6e:44:2c:85:ff:10:13:6f:ac:72:13:8c:14:21:6a:bf:
62:d3:78:7f:b1:7c:b7:92:3f:df:1b:12:96:d9:99:52:9e:25:
47:25:27:b5:c2:04:bd:3d:d1:92:ad:35:1e:88:21:6c:6c:25:
5b:bf:95:95:68:32:b8:46:69:25:85:ba:c8:8d:46:66:33:99:
be:c5:57:96:00:d0:87:5e:26:5b:55:e1:5c:74:ed:0b:69:68:
0e:be:9f:db:95:13:cf:47:6f:7e:96:65:01:ec:c8:43:96:29:
4b:fa:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:34 2025 by rpki-client