
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: mV7kxzItUV1lyKcTfIQTLR8wYZc0K08an56vSzz2qvw=
Subject key identifier: 4D:CE:70:EE:D2:23:5F:01:00:65:AD:E8:16:98:E6:D0:33:9E:CE:CB
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0197500EE9B8E85C48E58E4CF2CF980102BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0862
Signing time: Sun 08 Jun 2025 15:00:43 +0000
Manifest this update: Sun 08 Jun 2025 15:00:43 +0000
Manifest next update: Mon 09 Jun 2025 15:00:43 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: QV4sFF9DDRko/lGQn/VERYkxfFaJo/kXH5cuTzDrmQ8=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:e9:b8:e8:5c:48:e5:8e:4c:f2:cf:98:01:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jun 8 15:00:43 2025 GMT
Not After : Jun 9 15:00:43 2025 GMT
Subject: CN=4dce70eed2235f010065ade81698e6d0339ececb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:5f:bf:2f:0e:c1:14:34:d9:dd:07:2c:ec:
85:4b:de:5a:1f:cb:83:88:2a:a7:e9:38:72:36:38:
8d:f1:25:a2:a5:2d:00:90:90:8b:6c:3c:d7:de:15:
5a:9d:64:e7:da:63:45:4a:9e:71:60:72:83:28:f2:
3a:32:d8:ce:92:5c:ea:a6:e2:38:4e:78:d2:cc:be:
45:7f:3c:d4:f2:27:fc:12:2e:8b:7a:e7:f3:f6:3b:
3b:5a:33:0c:f8:54:eb:7a:19:89:65:ba:fc:0c:06:
eb:64:8f:cc:be:1e:38:43:bc:3f:ee:e9:5a:57:73:
70:46:7e:f0:34:90:9e:61:92:9f:7c:ec:7c:85:18:
65:0f:9b:e4:3a:5f:9e:81:3d:16:b7:8a:4e:09:96:
fa:93:87:08:d5:66:6e:a7:b0:8a:64:d8:93:78:71:
36:ab:d9:dd:4c:63:6a:9a:95:b5:27:93:59:27:fa:
ad:77:cd:e9:4a:7c:a0:37:f3:3b:9f:5e:99:c4:3f:
ef:b5:f6:a5:c4:98:6e:74:f1:a3:5e:a6:b5:ab:3d:
98:cf:0c:0b:5f:66:3c:53:f6:7c:cb:b8:97:7a:99:
89:8e:84:dc:60:f6:23:bd:90:13:f2:b9:a9:3c:80:
40:1a:c8:85:fd:6f:c1:f7:4e:2d:4d:58:41:92:37:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:70:EE:D2:23:5F:01:00:65:AD:E8:16:98:E6:D0:33:9E:CE:CB
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:e0:e2:5c:27:42:f6:bb:9d:2c:d0:d5:cd:c7:f9:22:63:df:
66:37:43:18:a8:99:47:b4:2f:64:bc:05:ae:03:ac:91:9f:bc:
dd:77:12:5b:8c:3f:f1:7d:22:df:d0:1e:24:b5:98:d0:4d:c7:
55:40:8a:7d:14:7a:2c:3c:5d:bd:59:84:d0:4d:51:11:7f:64:
94:fa:72:47:e9:5c:4d:ba:83:e0:d4:4a:fa:61:46:67:63:ad:
65:7c:7e:b8:15:41:ab:e4:d3:81:bb:9f:07:55:59:9b:af:c9:
6e:91:aa:f7:9d:e3:ac:45:60:45:c5:26:d7:60:bf:c7:5d:89:
07:ad:1e:90:69:d6:1b:c0:42:d7:21:95:f2:d8:ac:cb:39:e4:
27:43:44:fd:01:25:b0:03:8a:d2:98:8e:2c:4f:0d:08:c8:8e:
be:33:3b:b8:e2:6d:2e:91:f8:81:ff:8b:46:e6:84:90:43:c2:
58:29:7f:b5:8d:50:48:15:53:53:2a:9f:90:0e:73:0d:cd:cd:
03:11:49:0e:61:3a:86:7b:35:4a:63:dc:19:82:db:85:6e:ba:
f3:d5:f7:c8:d8:6b:91:2d:ca:0e:c0:69:20:90:0e:52:07:9d:
82:e8:3b:c8:ae:d1:ac:9e:6f:f1:e8:b7:93:11:29:65:79:61:
4f:1b:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:44 2025 by rpki-client