Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: M+06pCNm8/cbyI4Q8n7Gag0FpFPs7FUSS3lJqL1HpwI=
Subject key identifier: EF:29:0A:9F:C5:F5:E0:C2:80:81:73:FB:71:1A:3D:37:CD:8E:23:84
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 0197B6A1A197FA557BF2CD30E792C72A9AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: reku1eOIrI1H086PG3ITfqJax8ttSqoIlX6dgX4l53Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a1:97:fa:55:7b:f2:cd:30:e7:92:c7:2a:9a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=ef290a9fc5f5e0c2808173fb711a3d37cd8e2384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:c5:d2:42:79:4f:d2:1b:1d:32:c1:c1:18:
37:56:5c:c1:ef:21:af:0a:b2:31:79:17:38:4e:43:
57:3b:ca:a4:68:37:f2:d6:02:0d:86:09:de:ec:82:
15:a5:8f:c8:6a:21:ad:f8:b6:fd:83:7c:bc:6f:64:
2b:b3:61:17:3c:7a:3f:8f:a5:9d:dd:cb:08:4b:14:
f8:c2:05:f7:de:fc:17:58:34:71:f2:f2:c2:e4:ed:
a0:4c:a9:ae:a5:93:27:f3:34:6c:6f:35:de:0f:e9:
2e:1b:57:8d:2e:35:3f:57:1f:50:50:02:d2:5e:23:
d4:50:06:86:98:72:1e:d1:e3:d8:ca:8c:a7:fd:53:
3e:a4:5e:2a:ef:cf:cf:ad:d0:cb:7d:9c:e6:23:b5:
ab:d1:93:94:ba:f0:35:f8:ac:86:9d:aa:a9:58:d7:
6a:6a:a8:25:df:c8:8b:49:57:d9:a5:f9:df:29:59:
ec:24:54:22:ae:b8:39:0c:b3:dc:45:25:24:0b:c5:
17:0f:98:1f:be:ac:09:b4:d5:a0:a0:64:cc:ec:60:
a4:17:93:bc:af:26:d9:06:35:e8:ca:07:1e:0c:02:
79:52:70:67:fb:0e:33:da:5b:6a:4b:dd:2a:d4:cd:
ef:82:63:d6:0b:a1:62:b1:d3:8e:99:f7:15:f4:a9:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:0A:9F:C5:F5:E0:C2:80:81:73:FB:71:1A:3D:37:CD:8E:23:84
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:b5:59:4e:be:d3:1a:dd:95:a4:22:7e:cc:28:32:3a:33:
9d:8c:10:08:38:12:18:f6:42:d2:2b:f1:60:7c:bd:8f:6c:85:
f7:2e:76:fe:41:82:f7:2a:c4:30:3a:ee:f8:b0:f8:eb:50:ea:
fa:ef:61:1b:13:f3:80:1e:87:66:f1:71:54:89:12:16:a9:93:
6c:f5:9a:b9:f5:a7:d0:c8:da:8a:4d:db:aa:84:8c:23:9b:56:
c8:dd:8f:23:58:96:a5:07:51:df:12:64:26:41:6e:82:48:d5:
32:21:05:6a:77:b4:f7:64:98:0c:c5:a5:9c:c0:e0:1a:99:77:
e8:b9:32:55:59:55:a7:c4:70:b1:d9:e2:8b:7c:40:bd:aa:1f:
37:35:c3:26:89:db:f2:24:c6:37:dd:d7:2b:82:79:b6:52:34:
e0:a5:6c:58:d9:b6:bf:b1:2f:66:5d:6a:15:91:d3:af:56:8c:
26:18:64:28:16:1a:fe:87:c0:09:60:46:c6:0a:da:80:4f:25:
81:af:f0:51:3d:72:f5:a4:80:1c:0e:2a:af:3c:fc:f1:3f:aa:
27:53:a2:42:f4:df:d9:c6:bd:e8:6c:19:2f:73:9a:8d:e3:d8:
1c:43:86:31:c2:05:d3:08:68:1e:ea:58:53:70:6f:47:1d:34:
e5:db:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:11:54 2025 by rpki-client