Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: wGVt46zDYJV46xkneIMFIdWvYb/EEg3fk9TGRnIMLN0=
Subject key identifier: 86:20:C5:C3:88:A3:31:44:B5:97:C2:38:6F:D3:E6:C1:81:5B:33:F6
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019763CC963C4924C85F208B7963C56BC83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 0543
Signing time: Thu 12 Jun 2025 11:00:41 +0000
Manifest this update: Thu 12 Jun 2025 11:00:41 +0000
Manifest next update: Fri 13 Jun 2025 11:00:41 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: v/GNgol6SRaWj9olYxB7wlxijwS3f2azEL1GVjE1EPg=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:96:3c:49:24:c8:5f:20:8b:79:63:c5:6b:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jun 12 11:00:41 2025 GMT
Not After : Jun 13 11:00:41 2025 GMT
Subject: CN=8620c5c388a33144b597c2386fd3e6c1815b33f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:26:43:ed:d4:5a:73:80:38:7a:86:79:ff:
c1:4d:0d:34:53:51:24:82:a4:ef:b8:ad:89:ba:b4:
78:13:dd:ce:11:bc:c3:3e:0a:b4:8b:fc:2c:a4:86:
02:2d:96:50:ac:e2:67:6e:54:95:f0:44:51:dc:f8:
b5:04:d2:62:c0:a9:43:e5:58:93:32:40:26:f0:51:
c7:cd:44:47:63:07:78:f0:9e:df:ce:02:b6:c6:d1:
91:67:5a:75:4b:77:b2:ac:e9:cc:c1:8e:38:dc:92:
a4:a0:c3:85:1c:31:a8:77:08:9e:58:45:ef:21:45:
53:ea:a6:2e:52:5e:36:8e:27:84:f7:e0:82:21:5e:
47:e1:8f:bc:3b:13:fa:cb:bf:5b:76:7f:bc:47:3f:
73:ae:17:2b:95:34:53:2c:cc:c3:f4:7d:f9:70:8f:
0c:0b:7a:94:66:e8:61:41:5d:81:f5:9e:bb:38:a0:
5d:40:4e:16:d3:60:18:90:a7:fc:6b:43:86:83:0f:
f3:7f:09:0f:51:86:3d:ef:3c:91:79:e1:29:14:dc:
36:47:3e:44:2e:fe:bf:b8:fe:cb:f3:2b:25:5f:39:
49:7a:c8:4f:72:ca:d3:0d:fa:4d:5d:79:80:23:6e:
0d:95:c7:c0:2f:77:e1:82:b2:d8:b4:55:66:bc:b0:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:C5:C3:88:A3:31:44:B5:97:C2:38:6F:D3:E6:C1:81:5B:33:F6
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:80:c6:4c:e3:58:d4:f6:f5:8f:f2:4d:52:11:1f:fc:0d:
c0:fe:c3:3d:4f:a6:af:31:3b:82:c1:83:72:71:a3:0e:d5:84:
b5:05:2c:c5:4a:87:2a:80:15:52:f7:56:7e:34:ac:30:2c:4b:
e7:7c:05:0f:c0:e5:47:09:fa:dc:db:0e:8c:32:1d:01:9d:26:
d1:c3:eb:2b:24:19:dc:8d:9d:ff:80:f0:94:63:19:00:cd:36:
83:4a:a3:00:ce:11:9a:de:73:f6:ff:a4:2c:4d:88:21:a6:7e:
ad:42:4b:7c:86:17:6c:4d:49:af:da:c1:fe:94:ab:2a:cc:36:
8b:57:3b:0a:74:67:86:35:c8:e0:70:53:39:94:74:8e:36:32:
b9:43:a2:b1:36:9f:cb:44:a5:2a:8f:f8:f0:33:cd:23:4f:41:
18:fc:08:a1:f4:8a:07:a6:c9:0d:d5:7f:17:db:ae:73:c1:ef:
2e:1c:23:ef:ef:de:6a:31:82:04:25:e9:3a:f1:90:e5:f1:d5:
57:23:a3:bf:82:00:27:67:4f:58:32:d8:e3:08:7f:26:0a:42:
96:b5:a1:54:4f:9f:5f:87:da:5d:0d:9c:08:18:e6:31:40:61:
e2:ac:2e:7b:3e:d4:bf:06:56:b7:b0:f5:b7:c9:6d:a7:32:49:
97:5d:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:49:01 2025 by rpki-client