Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: Yq/u9snTM6Yw4VptU0FmBmkIVkYNhO/V8x8sB5IAs9I=
Subject key identifier: F9:2A:04:5C:1F:DD:0A:1E:F3:07:2A:E2:F7:3E:28:B1:18:7B:EF:17
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0197B6A0FD30262F8867763EF74F2263C7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0391
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: F8fJgQwEgeBjqSTzYGDLKHOrCy7Eamu4Wy2Gfv/eq68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fd:30:26:2f:88:67:76:3e:f7:4f:22:63:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=f92a045c1fdd0a1ef3072ae2f73e28b1187bef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:75:fb:93:29:72:9f:72:94:1d:f3:a4:b4:
46:1e:3b:33:eb:06:d2:5c:b1:2d:e6:7b:0a:7c:31:
d7:f8:48:2b:71:a3:c0:1b:77:02:32:81:1d:68:8b:
d6:68:5e:d9:9a:b7:ff:b8:72:3b:6c:96:8c:50:7e:
b0:d8:07:09:dd:bb:9b:26:d1:c2:e5:6c:78:be:f4:
39:48:ff:27:76:32:e9:c4:2f:66:ad:e3:1f:54:6f:
5a:9e:b7:8a:bf:c5:f2:c2:34:8b:47:8c:17:9d:c1:
2f:42:e3:66:14:96:0f:77:8c:d4:3f:5b:ee:53:2b:
75:88:68:fd:9b:fa:9e:29:5a:c2:f8:de:83:7d:2f:
5d:02:f7:89:19:b6:42:1c:7e:87:dc:89:23:29:55:
27:48:4f:60:d8:41:4d:87:c9:ff:45:a8:af:f1:a4:
3d:ec:20:a5:87:0d:e6:53:dd:ee:9b:78:b4:e2:6f:
21:71:7d:f5:8b:03:7e:ff:cd:9f:71:22:c2:ab:df:
16:f5:c9:6b:ff:74:52:ba:69:b0:9a:79:ab:70:ca:
ee:ea:36:8f:1b:e8:25:da:1d:cf:f3:6d:8f:55:cd:
e6:e6:70:06:56:f6:12:3c:a8:60:5d:24:c7:6d:1b:
7f:93:7d:ab:6d:3b:21:26:e5:46:98:29:43:22:2a:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:04:5C:1F:DD:0A:1E:F3:07:2A:E2:F7:3E:28:B1:18:7B:EF:17
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:38:51:99:fd:21:a3:25:20:3b:15:45:c1:92:b8:02:84:8f:
7a:92:cc:45:d7:16:ed:33:a5:98:dc:e0:24:c7:b0:19:a6:07:
cc:5d:c8:8d:b2:6e:2b:ba:2f:64:1c:c7:2c:9b:39:b3:3c:75:
2f:50:75:f8:e4:75:ed:e4:18:63:8c:91:b3:fc:69:31:22:19:
fb:5c:d4:ea:98:a1:d3:7f:38:9f:6a:c2:5b:6c:48:73:74:4e:
36:29:7f:1c:3f:08:bb:32:92:58:57:2b:53:49:b5:9b:dc:16:
73:ef:57:50:cd:03:f7:34:18:bc:31:42:37:1e:8b:02:d2:95:
90:59:5a:88:af:67:a0:f1:b1:c2:1d:61:ee:06:48:78:05:74:
c5:27:e7:a6:1d:fa:05:a5:fb:de:c9:66:d3:5b:a5:5d:87:43:
e1:52:da:fc:89:05:47:b5:2d:9a:87:1b:a1:26:69:53:38:02:
8f:ce:1d:61:c1:15:ed:13:a1:57:af:ca:56:a8:2c:41:8b:9c:
5f:71:ab:b6:f1:be:f3:a7:4c:42:0d:36:43:27:b7:eb:83:ec:
43:10:d3:b6:cb:0d:ca:f9:a0:28:5c:c2:2d:37:47:5a:38:46:
84:79:5d:1a:2a:5a:8f:d5:98:6d:35:79:9e:90:2a:79:7c:52:
1d:f1:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:18 2025 by rpki-client