Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: 8eerYa0WZCKUJnJ0kJCvSHkPt4szgvtSHBbRHq3ZsQI=
Subject key identifier: CC:10:82:2A:A0:DF:E4:ED:C7:4F:21:60:CA:FE:FF:37:6B:CE:D6:02
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01974A0CB70BB65249FCFB14ABA992622E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 029D
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: KFUDXZ/PgUF5yoP5Ucbj6x0/ODKI54LpCpj50o9/BBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b7:0b:b6:52:49:fc:fb:14:ab:a9:92:62:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=cc10822aa0dfe4edc74f2160cafeff376bced602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:6d:05:a4:dc:82:d2:7d:0d:3e:8e:37:b6:
fc:e4:aa:4b:c6:9a:3d:a5:f7:50:d4:38:94:cc:36:
04:44:78:04:12:b0:55:7a:64:95:f2:02:ab:f3:44:
06:4f:0d:3e:d1:ac:e6:ec:f8:c1:77:ce:98:bb:84:
71:0f:21:00:56:32:38:39:bf:c5:bd:82:d4:63:8c:
6e:29:75:ce:bf:ab:0e:b9:b9:71:84:e2:86:c4:31:
fb:68:59:c2:72:63:5f:79:62:90:15:27:1a:e2:f4:
9c:12:1a:b4:c7:d6:9e:45:56:1f:30:21:5a:43:25:
d9:19:8a:7a:d2:12:4b:eb:3a:0c:3d:d0:36:50:4d:
bb:cf:73:a4:3a:44:b6:a2:82:cf:f6:c0:9a:29:c6:
ea:60:cd:4e:f7:3f:66:b1:83:d6:45:54:6b:64:47:
e1:71:d8:88:62:1e:e7:a4:e9:66:50:ef:93:09:95:
10:ad:5e:a6:88:d8:26:23:3b:25:c7:79:36:28:54:
51:4b:90:1d:34:26:4c:da:d6:92:b4:10:24:db:02:
57:5a:3f:cd:91:a7:f9:ac:4e:e2:a3:07:27:fc:39:
18:32:5d:ad:e0:33:53:82:95:be:a3:a8:1b:95:ad:
e5:13:64:d8:0d:b3:95:62:75:d0:63:ec:16:04:18:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:82:2A:A0:DF:E4:ED:C7:4F:21:60:CA:FE:FF:37:6B:CE:D6:02
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b3:cc:3a:be:22:fa:5f:eb:00:93:bb:87:f8:5f:11:c9:9b:
77:49:32:c2:11:c3:e7:e4:a7:bc:2f:71:4d:d7:3f:d1:88:1b:
1a:2f:91:7d:ef:47:44:92:c3:52:52:d0:45:25:2b:ae:73:cf:
f1:f0:f1:e3:c6:82:a1:93:d2:5a:da:88:99:5c:e8:2a:2d:2e:
06:fb:49:63:37:f5:c6:aa:b9:4e:0e:b5:1f:c9:46:2e:b2:ab:
d9:fa:5c:48:5a:55:53:e7:fc:55:1a:f0:f8:60:45:c7:1f:5d:
be:2e:6b:11:cf:69:04:33:30:b9:55:5f:8b:08:8d:51:fc:a9:
df:9d:e9:07:6e:a0:b9:16:83:41:af:13:35:75:28:ba:2d:68:
0c:7d:6a:55:f0:27:86:4a:32:9c:ab:a2:cf:0e:47:ca:d9:19:
69:87:81:f1:4a:96:1f:6c:be:6d:66:03:d5:e4:ed:da:cc:20:
93:6f:65:f9:59:9c:d5:d2:50:d9:2a:d5:1b:b3:aa:c9:ef:9b:
c7:a1:1e:88:56:a3:1d:be:5c:f9:59:2c:86:ea:76:46:07:c2:
50:30:b0:ad:90:77:da:49:ac:0f:09:a9:a9:4f:ab:35:b8:cc:
77:2f:fc:58:2d:09:17:e2:b8:32:59:1e:2c:13:ae:98:2a:ae:
06:07:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:41 2025 by rpki-client