Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: Tk0OBQWkVMVHiNLYq3M3XHW6AFdn9a8hoTwjwHjq+zE=
Subject key identifier: ED:C1:AB:07:B6:C0:DF:F4:00:54:12:96:C1:26:68:CB:BB:AA:6C:81
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 01974A7AE2A2EE79D06B2EDB6A2BB57FD774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: nGUk9P1tzBXXueS4eaR3876rFBez5sOODUnZ5o3Nr34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e2:a2:ee:79:d0:6b:2e:db:6a:2b:b5:7f:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=edc1ab07b6c0dff400541296c12668cbbbaa6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:15:30:3c:49:15:c5:37:ec:58:60:89:ab:
ef:29:fb:61:86:1d:82:ef:6d:b9:b0:48:97:f5:fe:
49:17:a6:73:8d:8c:2b:94:e0:43:fd:4f:e6:0f:04:
15:9c:2c:84:99:99:16:2b:ad:9b:ff:05:ea:14:09:
5f:a0:b7:c4:83:92:67:18:3c:54:5b:0b:1b:8c:e9:
b7:5d:3f:90:a6:f4:93:eb:8f:ec:d9:06:31:92:f9:
31:0e:31:a5:a0:d2:15:99:41:52:bb:b2:38:19:07:
68:d0:a5:0d:4b:9a:19:e9:44:90:12:a3:fd:a0:dd:
1b:e6:ba:16:2b:72:2e:27:34:3a:10:f3:c4:ab:24:
32:a6:66:0f:5e:0b:57:af:aa:9d:85:ee:aa:67:74:
ee:ab:74:9e:5d:96:19:09:0e:0c:fc:ec:7b:93:f7:
e2:79:05:4c:e6:7f:4a:6a:05:50:cf:07:0c:83:7c:
f1:58:06:5f:bd:d4:8c:a1:46:ca:94:d9:37:da:2b:
54:e1:ab:ba:68:0c:91:3d:8a:d9:9c:6e:c1:e6:6c:
9c:14:fd:29:4a:02:56:64:22:05:7c:a5:15:cd:34:
99:b6:a2:c5:4b:37:3d:22:f8:ec:6d:aa:b7:cb:69:
71:8a:ab:7d:bf:4b:d0:7e:89:ab:9a:be:d2:b9:91:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:AB:07:B6:C0:DF:F4:00:54:12:96:C1:26:68:CB:BB:AA:6C:81
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:b9:1d:af:f1:92:e7:83:41:bd:35:f3:04:9f:a8:eb:49:
ab:2d:49:4b:29:0a:e9:e0:38:99:63:98:34:cb:76:de:a5:f2:
e7:f7:c6:e0:9d:e0:c5:1a:25:29:00:1a:c9:8c:91:82:fa:0b:
55:d4:59:81:42:87:3a:75:6e:34:15:ee:8c:ef:61:58:a6:bb:
87:52:3d:89:73:44:27:a8:6c:c5:42:4c:1a:82:4e:25:5e:c6:
24:84:10:a9:13:f8:81:b7:46:7c:88:54:eb:46:b8:4d:df:39:
2a:fa:aa:72:cd:6a:ed:45:52:72:e4:7d:63:69:32:73:e0:46:
aa:d8:58:d9:6f:b0:53:96:42:3b:80:88:40:8a:9a:58:b7:05:
11:33:ce:82:56:2f:5e:b5:e3:59:26:19:1b:ae:a0:74:f1:da:
a5:8f:9b:d3:50:14:01:5a:6d:0a:f3:71:a0:81:3a:15:c4:1d:
e0:dd:2d:f8:e0:29:50:7c:22:6a:ef:f7:51:61:7e:32:c1:dd:
15:e5:37:27:c7:fc:83:85:a1:93:df:a4:14:ab:8e:5f:8f:4e:
35:7f:25:63:9b:25:9f:fd:f3:b9:75:cb:57:94:34:c6:d9:0a:
a0:c7:57:b2:58:6a:9f:91:d4:8d:f1:b9:6f:b0:85:13:b3:41:
95:36:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:27 2025 by rpki-client