Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: G5LhcpyAn89eXCvnLpBBNZEUYX/BSe6s5geVDzYvv7I=
Subject key identifier: 40:6C:05:80:A1:94:9E:76:C3:1A:29:9E:2C:82:43:5C:09:AF:27:D4
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01984408A95F89255BEAC8C9FF25E6AF1920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 159F
Signing time: Sat 26 Jul 2025 00:01:14 +0000
Manifest this update: Sat 26 Jul 2025 00:01:14 +0000
Manifest next update: Sun 27 Jul 2025 00:01:14 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: M8oa5sW6P0gJvW1MFrPs4BlRzNO1/gkVvLDfpkN3ws8=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:a9:5f:89:25:5b:ea:c8:c9:ff:25:e6:af:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Jul 26 00:01:14 2025 GMT
Not After : Jul 27 00:01:14 2025 GMT
Subject: CN=406c0580a1949e76c31a299e2c82435c09af27d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:f2:f8:c3:80:13:ed:3d:ed:7d:b9:91:05:
d0:65:20:39:6d:34:f4:b0:09:8e:15:ce:4f:07:77:
1f:c6:2c:d5:c7:b6:b2:e2:c3:24:3f:ef:19:3e:9c:
68:e6:03:f5:c0:84:2c:f8:11:05:e9:91:d7:b7:13:
d9:ab:57:55:79:8e:37:04:69:3a:99:02:99:f7:ea:
5e:09:d0:bc:94:8b:01:82:50:ca:e4:bc:2b:5a:97:
a9:05:08:f7:90:e3:98:92:f8:e4:dd:15:a1:6a:fb:
29:c4:44:d7:68:aa:70:38:d2:b0:f1:0f:80:e6:27:
fb:71:da:e0:cd:c9:fe:ca:5a:eb:63:f8:e5:ec:c8:
d4:d1:4c:8c:3e:46:be:67:af:04:87:b2:0e:ec:37:
2d:39:34:69:71:41:eb:11:bd:c5:e4:77:7d:79:94:
27:54:85:a7:97:05:2d:7c:9f:1a:91:ed:50:bf:9a:
e0:04:a9:7f:41:5d:99:77:cd:7c:0d:b1:a6:39:9f:
59:74:fc:fd:87:fa:2f:af:17:98:8b:35:56:8e:fa:
b9:55:04:f8:27:d4:84:09:f6:3d:58:b2:88:0a:c3:
39:6a:1b:f4:df:87:b1:53:a4:27:3c:6b:8e:d9:5a:
9c:f8:ba:9d:38:09:ba:f3:1d:3a:4d:57:3a:1f:26:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:05:80:A1:94:9E:76:C3:1A:29:9E:2C:82:43:5C:09:AF:27:D4
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:7f:27:d9:73:b2:fb:40:73:54:8b:02:01:52:37:f2:68:
bd:4a:41:21:6e:d2:16:af:25:90:82:df:8d:af:a2:f3:80:82:
8b:0c:fd:38:6c:6e:bc:73:da:2f:3a:cd:7d:56:2b:15:61:27:
48:52:b1:c3:c2:83:76:dd:f0:29:44:01:0d:fd:6e:f0:f2:4c:
5c:ce:21:bb:e0:e0:04:3c:7f:ee:3d:ff:7b:52:e9:47:33:cf:
bd:1f:d7:a7:59:60:43:35:81:dd:a2:9e:92:a7:bd:5c:ef:de:
1a:60:ef:35:7f:e9:0a:56:dc:47:66:5a:08:35:b6:9f:55:20:
18:a7:54:f1:3e:15:88:4a:b2:63:17:1e:9e:1c:a4:e9:6a:0b:
bb:ec:43:a1:3b:b7:d7:41:c1:da:2d:5e:73:5f:02:64:37:29:
c3:9c:b6:8c:7c:10:fc:45:ca:25:e2:d1:d9:e0:d3:bd:04:ee:
c3:41:89:58:34:e1:e6:a0:ad:9c:c9:22:0f:88:53:33:1d:46:
94:ee:51:06:89:35:b5:c7:7d:1b:45:05:88:c0:43:df:cf:d4:
ec:d3:03:89:b7:6e:bb:94:15:53:11:39:bb:87:94:76:d4:19:
e0:9e:84:62:37:fa:ff:da:e1:db:49:1e:05:cf:65:be:fe:89:
bc:85:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:19:44 2025 by rpki-client