Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: 6no9WjA87yUOVOdDtyn30ZtPH0q1Oi8ep/hfst9thy4=
Subject key identifier: 60:1E:E9:CD:E6:B4:04:83:B3:FD:3B:5A:98:D0:AE:D0:92:63:65:D3
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0197B7EAACA9D29F87DFA67F809B493182B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: iqW7mbbN7bfnOrqR5vuIJjRyZF4e8OMyyC53/6xVTpA=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ac:a9:d2:9f:87:df:a6:7f:80:9b:49:31:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=601ee9cde6b40483b3fd3b5a98d0aed0926365d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:ea:7c:3f:1b:f0:57:8e:55:9d:73:f9:1e:
8e:75:16:28:a0:3b:12:aa:c7:76:79:2c:c4:db:09:
60:03:3d:bf:4b:a9:8b:d1:eb:7d:3f:cb:32:00:03:
6e:d7:42:33:62:e0:82:97:82:01:31:c1:18:69:bc:
bc:f9:76:2b:8a:70:d2:a2:8f:9e:0f:1e:35:27:81:
b0:b4:10:ee:cf:ef:de:7e:7b:9a:41:1b:ae:94:00:
c4:9a:74:61:5a:c8:cf:32:d3:ee:ec:0d:65:91:1a:
50:dd:d5:19:c1:bf:10:f4:e9:00:85:eb:48:f3:e9:
b2:d9:7e:e9:b3:ad:25:3b:a3:ca:6c:e9:65:48:e5:
12:62:db:6b:8e:88:e8:6a:85:51:7a:c9:1d:6c:77:
d5:3d:15:0d:e4:45:71:fd:45:b5:2e:f7:83:1f:03:
0e:e1:20:41:6d:f6:89:f1:d4:c2:a1:23:7a:2f:a9:
47:17:c6:9b:93:72:11:81:bb:3b:f2:0a:c2:b7:35:
22:52:f0:6b:a1:d7:6a:8e:f1:e1:61:11:72:00:fa:
81:f7:da:ab:13:44:33:0b:d3:e8:b8:3f:ad:30:59:
79:04:6b:75:6d:6c:70:4e:83:20:da:2b:f3:70:51:
a7:be:74:ed:b2:7a:5d:24:64:0d:56:41:31:b6:cd:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:E9:CD:E6:B4:04:83:B3:FD:3B:5A:98:D0:AE:D0:92:63:65:D3
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5a:f7:e7:01:f9:01:a0:16:43:7d:ff:8b:53:d6:f1:6c:df:
c9:1e:29:3f:39:c4:15:e2:5b:00:19:37:98:9c:f4:ad:e9:bb:
60:4e:02:9b:a9:5e:1c:54:d5:25:cc:f6:b5:cd:1e:57:db:ec:
7d:1f:e5:0a:b8:d1:2e:30:dd:98:c9:9f:16:0a:d8:dd:7f:13:
08:d5:8a:b0:71:50:69:12:85:02:83:51:f4:16:75:67:ff:3d:
a3:68:d8:20:6b:3c:eb:6b:39:e9:33:58:05:40:8c:4f:67:d5:
c5:d9:5b:ab:0b:c8:88:f5:4b:ca:1f:f7:64:6e:11:88:d3:80:
3d:95:0e:aa:df:9c:1c:b2:4b:3b:af:3a:c9:19:6a:51:7b:e5:
0d:06:97:f3:d3:c3:58:2b:b6:61:5e:de:fb:b3:4e:6f:e7:0d:
f2:b2:8c:07:88:b8:54:24:19:fe:22:2a:d8:db:19:0d:f1:d2:
41:b0:5d:26:c0:87:25:6e:9e:b8:81:5f:17:0d:ed:f6:ca:34:
91:91:f7:73:a3:6a:44:c5:de:5d:26:6b:76:22:10:ae:2b:33:
65:91:cf:f1:a6:9d:74:70:5a:7c:f1:01:8b:09:60:b8:f7:38:
7f:8d:0f:50:b9:2b:cb:fd:1c:7b:4c:cb:76:00:94:60:d3:85:
58:aa:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:15 2025 by rpki-client