Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: 4mZsYs06qRv+Huezn23OmGBFMY8KLzjI7EM1mvpTMCw=
Subject key identifier: 53:4C:B7:FA:84:92:7E:C1:B2:04:9D:9D:B6:B9:29:EB:D2:AE:71:FD
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 01974A7B59F3274FF1CA3EF9CD546AA8749B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:27 +0000
Manifest this update: Sat 07 Jun 2025 13:01:27 +0000
Manifest next update: Sun 08 Jun 2025 13:01:27 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: Q8f/h5OiiCFMDbD3FuOeZJjI16TbGveab6wGFDrd+jI=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:59:f3:27:4f:f1:ca:3e:f9:cd:54:6a:a8:74:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jun 7 13:01:27 2025 GMT
Not After : Jun 8 13:01:27 2025 GMT
Subject: CN=534cb7fa84927ec1b2049d9db6b929ebd2ae71fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:5f:9a:71:5c:78:07:e3:af:c2:43:51:e9:
32:65:05:a2:a9:f0:f4:25:72:1b:83:54:dd:69:96:
4e:df:b5:69:f2:b3:92:a2:32:c4:67:cf:e2:8e:2e:
a8:86:0e:b1:6b:8e:f5:34:8e:6d:9d:08:46:10:68:
11:4e:f5:04:46:ce:29:34:14:27:6e:ef:80:9b:aa:
f4:94:ed:73:3a:e2:1c:85:33:19:e3:8f:c8:fd:e5:
ea:14:71:a4:85:52:25:e0:de:c7:65:9a:ee:9f:06:
6c:d6:11:bb:db:3b:fa:f7:ff:46:76:36:4e:42:dc:
57:f3:f0:96:c7:08:86:41:44:25:8c:f1:94:b3:00:
99:6f:5a:c9:dc:b7:d6:7a:31:ce:36:73:55:dd:fc:
de:f7:ed:53:43:e9:00:90:a4:50:59:d6:57:7c:e5:
bf:85:7e:79:ae:40:60:6a:a0:7f:41:b5:01:aa:7d:
f9:a2:48:42:65:0f:95:ed:5c:23:72:49:26:9c:ad:
00:ea:47:5b:22:81:a2:e0:da:78:fe:be:e9:5d:3e:
47:40:30:5b:d9:30:4e:85:f8:a8:c5:d3:db:29:be:
14:5d:f2:c7:8f:2c:4b:4d:d1:ec:4d:a9:f4:dc:02:
ba:24:2e:e1:fe:e5:eb:cb:6f:50:f0:d5:3f:be:6d:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:B7:FA:84:92:7E:C1:B2:04:9D:9D:B6:B9:29:EB:D2:AE:71:FD
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:5b:f8:d6:3b:fd:b3:4b:60:98:d4:37:76:d3:94:1e:89:
96:c9:ca:be:5f:9c:d9:09:8d:93:0b:27:6d:9c:a6:d9:71:69:
66:c1:d7:34:ab:18:c4:8d:86:fe:03:47:a8:b3:de:2c:be:bc:
0a:93:b1:fe:3f:18:f4:83:b0:38:98:f1:1a:f7:c2:88:bb:92:
f4:7b:a5:c0:c6:f1:d9:71:ce:db:a5:1d:1a:73:7e:13:95:08:
b3:32:69:a7:bf:9d:0e:03:d0:4f:5f:53:96:ad:1c:00:ef:a1:
79:df:1b:f8:4b:c1:32:23:7a:c2:55:ac:a4:a9:8c:97:b8:b8:
ba:99:30:f3:f7:2b:60:b2:7a:87:c2:70:c0:38:6c:3e:18:17:
e5:a0:57:31:13:aa:b9:90:80:68:39:6f:f4:2e:ae:88:98:c2:
80:76:cb:b9:73:56:ba:40:70:1a:f3:b5:2d:04:ac:53:57:2c:
1c:55:0f:66:d4:20:b1:ba:76:36:7e:47:0f:a1:08:50:9b:1f:
59:67:1c:6c:0a:47:29:56:8f:ff:67:f3:35:23:e2:8c:c4:69:
05:11:c9:94:35:6b:93:8d:ba:66:81:f2:67:b0:9e:c7:90:8f:
59:55:07:a8:bf:83:a5:8e:b4:f3:25:c8:27:7d:31:41:27:44:
a0:65:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:41 2025 by rpki-client