Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: VaU4ueGoi7sUA4a/UAQ01xc8/vmGalfqdNEpkZdKe+Y=
Subject key identifier: 61:2C:CE:5B:9B:A7:A2:BC:D7:6B:EB:1E:77:3B:F1:65:20:F6:3B:93
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 0197526B40279EB5C973C92138C8CA80D0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 02:00:49 +0000
Manifest this update: Mon 09 Jun 2025 02:00:49 +0000
Manifest next update: Tue 10 Jun 2025 02:00:49 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: yn2DPhNdWjkDergJ+Zm/K92Xr5447KQq7vnBPoUJNOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:40:27:9e:b5:c9:73:c9:21:38:c8:ca:80:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Jun 9 02:00:49 2025 GMT
Not After : Jun 10 02:00:49 2025 GMT
Subject: CN=612cce5b9ba7a2bcd76beb1e773bf16520f63b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:86:d9:df:f9:b9:69:a2:5c:d0:0f:4c:95:
f5:f9:be:87:a3:08:4f:c9:a8:f3:f4:f9:79:ab:ff:
8a:23:94:49:14:2f:af:ae:79:e9:c5:99:49:f3:a6:
ae:88:b9:a5:ea:1f:38:e5:72:57:1f:86:6f:80:21:
ee:95:c3:c2:0b:5d:db:23:1d:7f:07:e9:04:75:21:
dd:15:89:f4:be:c2:2e:88:df:a9:d5:9e:37:64:71:
56:5d:cc:34:13:58:c5:0b:e9:b9:9f:8a:56:7b:8e:
a8:2b:87:67:a6:75:68:d1:6e:e8:87:21:4d:fe:a8:
00:ed:7d:77:d8:75:67:0e:0e:7b:3b:da:16:d4:14:
76:1a:87:d8:4e:e0:0b:49:62:fc:52:89:a4:c1:c5:
32:6b:44:b0:7f:fb:7d:6c:90:aa:16:5d:72:f2:ba:
cd:1c:51:82:eb:80:75:43:1f:05:0f:18:2e:f3:7b:
dc:9d:8c:44:6f:e3:5a:dd:df:2d:4f:e5:37:5f:7f:
61:f9:d2:e8:6b:26:b3:a6:fe:a7:fb:c9:ac:88:e9:
43:ad:7d:11:74:cf:f9:2c:90:9e:9c:09:ef:62:9b:
68:89:68:85:2c:61:91:af:16:71:6d:87:80:b4:62:
1f:ce:36:59:ac:07:ab:00:a9:38:04:76:22:e7:25:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:CE:5B:9B:A7:A2:BC:D7:6B:EB:1E:77:3B:F1:65:20:F6:3B:93
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:ae:8a:81:64:3b:fc:74:49:9c:43:91:d3:1f:ea:6f:93:
a4:fe:83:ea:15:27:7a:ee:90:57:61:63:8f:c7:35:2b:a2:f7:
d7:c0:9c:c7:0f:d1:f1:b6:5c:8d:a4:b0:8f:4f:58:a1:47:06:
1a:89:b1:62:54:09:29:46:4f:1f:aa:69:f6:38:81:49:49:09:
af:ee:f3:ea:44:cf:45:fa:5d:65:a1:cf:05:c9:dc:96:89:6d:
76:8f:af:3c:8a:18:37:f6:b5:05:c4:55:53:d7:79:a2:d2:12:
cf:58:65:fa:11:66:23:3b:55:dd:b0:50:9a:40:e2:f2:4c:0a:
50:c1:f7:35:48:45:f2:4a:e9:90:fe:2e:c1:af:9c:2e:e5:fc:
9d:ba:1d:53:a9:7a:75:3f:ab:00:5e:d5:a6:08:85:b1:d5:6d:
9d:09:ce:d4:08:ca:9c:22:18:db:f3:f9:b7:1a:c0:a7:6a:45:
a7:30:a5:e7:f7:f8:20:b8:b0:bf:99:5c:64:8c:92:78:87:4e:
1e:c6:12:6a:ea:8d:c9:be:42:b1:65:e5:14:e1:45:f8:d8:7c:
0d:31:98:23:aa:bd:94:a9:37:52:2b:d5:6c:f6:af:f0:e0:e8:
cb:3e:df:87:76:ad:72:77:ce:c2:92:05:8b:b1:9a:21:f3:03:
4d:82:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:13:28 2025 by rpki-client