Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: gti54KwkRTKBugzWyZHeVqIp+MklJwktcCC01071TlU=
Subject key identifier: 8F:DF:79:48:42:13:7B:91:0E:AF:3F:29:3E:ED:C9:F5:64:A6:76:6B
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 0197583645972C97DE7A4CA4E4A7AB6CE26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 053D
Signing time: Tue 10 Jun 2025 05:00:41 +0000
Manifest this update: Tue 10 Jun 2025 05:00:41 +0000
Manifest next update: Wed 11 Jun 2025 05:00:41 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 2djMtOcSqWZPzYXnhP/9nfor6Z0daoOCy5Bd7UC8jxQ=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:45:97:2c:97:de:7a:4c:a4:e4:a7:ab:6c:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jun 10 05:00:41 2025 GMT
Not After : Jun 11 05:00:41 2025 GMT
Subject: CN=8fdf794842137b910eaf3f293eedc9f564a6766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:a3:3c:75:bb:cf:a7:83:7d:19:a3:cc:7b:
9d:e3:65:f8:26:ea:d7:e0:2f:4f:c6:31:62:2a:5f:
ed:74:8b:82:08:f6:3a:76:1c:10:38:b7:c5:19:b0:
c4:50:ad:4c:ff:07:43:19:61:e0:93:ab:fc:0d:fd:
4b:4f:07:f1:16:f9:80:3a:4c:1f:2e:de:ab:bb:1e:
a6:8a:8f:c7:54:c2:63:e5:87:ca:4c:8b:bd:ca:34:
a7:42:46:ae:cc:0b:03:23:36:85:1e:43:a2:2b:57:
68:ab:17:93:94:8f:cc:dd:52:b3:28:4d:cc:3f:29:
ae:a0:1e:74:23:8c:c8:36:fd:78:0f:19:36:97:44:
7d:2c:51:6d:be:e9:e9:a1:a1:cb:f2:c7:fa:bc:b9:
94:03:8f:cc:5e:ff:c3:33:9d:b3:17:17:03:82:61:
59:6f:7a:87:0d:80:2d:18:2e:1c:56:68:a9:ec:ea:
5b:8d:c9:8e:a1:9f:94:b6:8c:f0:c4:29:2d:b7:2b:
52:5a:0d:17:ba:a8:19:fe:63:48:83:75:97:ab:60:
74:ba:db:5a:ce:82:1d:da:7a:01:c3:e8:18:99:b1:
72:20:96:3c:40:fe:f2:58:f0:00:56:c5:4e:a4:27:
e3:ef:90:c6:95:57:eb:d6:38:06:66:be:f3:07:14:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:79:48:42:13:7B:91:0E:AF:3F:29:3E:ED:C9:F5:64:A6:76:6B
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d9:6c:89:7c:a9:9d:94:0e:45:91:ba:62:0a:e4:29:59:5d:
5e:ed:2b:92:1f:85:cb:87:18:e6:34:fc:74:3e:49:76:53:a1:
f7:2b:13:bc:25:fb:39:a9:25:8b:c9:b5:86:0a:bd:ce:ce:53:
2e:97:06:81:28:2c:6a:ef:8b:2c:13:f2:15:fc:21:89:fd:02:
d0:9d:28:77:4e:59:ca:25:35:0f:6a:17:43:ac:30:66:e0:a7:
de:f7:c4:6e:60:ac:64:89:50:3a:f6:17:0c:53:ef:df:63:b7:
b0:26:60:0c:f2:ad:5b:4e:fc:fb:8c:ea:d9:20:06:74:99:80:
52:dc:6a:aa:f4:ee:71:d0:86:09:14:62:b1:7f:58:05:90:b0:
b8:50:af:d4:ac:7d:44:73:0e:e9:cf:f0:9a:a1:8d:f0:ee:9f:
87:63:78:d0:ef:c7:c6:c3:49:85:aa:46:1e:88:d2:61:7d:ef:
ec:80:c2:77:c2:0f:79:63:95:6a:9e:2e:ce:a9:9f:61:7e:07:
f7:7f:f8:ed:41:7c:91:79:d9:42:aa:bf:94:72:14:ee:71:61:
d8:dd:ca:ef:92:f6:5d:43:0c:f5:6a:23:48:5f:7e:9e:38:20:
f8:aa:f9:33:e5:5c:74:fa:17:31:8b:dc:5b:3c:dc:ca:1f:f1:
80:4d:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:47:49 2025 by rpki-client