Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: st3mZDv3vVsMB/q7sC0P6q3KA4T1jvaePpMEydEDdMc=
Subject key identifier: D7:89:C5:A0:18:88:D8:33:7A:34:FF:CC:E2:47:48:C0:2F:89:01:46
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01974742CFC2E764B78617E16B15556EC264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0471
Signing time: Fri 06 Jun 2025 22:00:50 +0000
Manifest this update: Fri 06 Jun 2025 22:00:50 +0000
Manifest next update: Sat 07 Jun 2025 22:00:50 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: PRXy+FJHpoii1y/KEDhBLKrrFLG42+0ksnDF7+iaLoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:cf:c2:e7:64:b7:86:17:e1:6b:15:55:6e:c2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jun 6 22:00:50 2025 GMT
Not After : Jun 7 22:00:50 2025 GMT
Subject: CN=d789c5a01888d8337a34ffcce24748c02f890146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:28:70:e5:d8:b1:e1:dd:fb:8f:a6:e2:96:
a0:a8:a5:d7:30:37:50:84:c0:86:08:dd:81:d8:46:
cf:5f:fd:c0:9e:a7:a1:0e:1f:05:0b:c6:9b:94:6b:
f0:dc:4c:cf:81:ba:ae:4b:75:b5:ea:08:8c:a8:e6:
c0:79:6c:ab:7f:0a:f9:39:1d:13:8c:99:ab:5e:20:
fb:d5:fb:27:c7:41:b7:5e:b9:f1:c6:ff:00:41:e1:
76:1f:9d:8e:fc:1a:03:21:07:21:21:3c:fd:7c:2c:
1e:ed:b9:18:5d:e3:c5:4b:69:a1:d7:a4:b0:14:ae:
1a:54:36:8b:77:28:84:ad:e4:d6:16:d5:a4:50:ef:
82:08:15:5c:fd:38:a6:10:c4:4b:1c:fa:16:ff:08:
bb:bf:a9:a0:60:59:2d:97:c6:df:45:f0:a7:b1:85:
ae:11:c9:dd:a4:46:86:65:5c:99:8c:54:37:16:1c:
71:4c:99:7e:b6:be:d3:ed:8d:20:68:1e:20:03:06:
b5:cb:db:10:93:7e:af:5a:f4:40:a0:35:f5:fe:7d:
b8:da:5e:5c:26:f7:a1:75:4e:f5:4a:5f:4c:48:18:
a8:c3:f6:7e:a6:f2:bd:38:8d:24:9e:ab:97:ab:19:
84:5e:5b:ea:d0:f5:08:cd:30:6f:fd:9b:72:bc:2e:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:C5:A0:18:88:D8:33:7A:34:FF:CC:E2:47:48:C0:2F:89:01:46
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2f:ef:7a:5f:0e:48:10:41:4e:3e:3a:ac:eb:d1:31:db:e6:
ea:07:a9:fa:52:7b:09:7d:5a:ce:6b:21:a2:c7:0d:da:5d:8c:
75:0c:21:0a:71:89:a1:c1:24:11:90:82:18:cb:db:af:ee:1b:
d2:47:87:9b:7d:8a:9f:69:dd:77:10:26:5e:a3:54:82:50:38:
cd:98:69:cb:fa:dd:31:11:06:18:d9:ba:93:79:ca:a6:23:d0:
88:bb:ed:fc:58:02:41:aa:06:8a:03:b6:21:99:b4:08:51:a7:
00:13:51:0b:c7:85:76:85:44:86:d5:f6:b4:d2:cd:94:7f:c5:
33:be:56:a9:8f:2d:b0:93:6d:72:dc:8a:2d:e3:78:b5:a9:97:
84:e8:a0:61:fc:50:a3:d5:d2:18:a7:65:e2:d9:ab:c0:36:49:
a8:59:0b:94:4e:8a:77:ee:0a:e6:3c:11:fd:2f:bc:7c:ea:f7:
5f:d7:fe:de:6d:8f:04:e0:07:7d:85:3d:b8:4c:eb:4b:35:08:
67:c1:b6:8a:dd:92:74:0c:18:2e:ec:f3:a8:7c:7e:27:ee:d5:
0d:a7:42:07:7b:44:fa:29:25:4b:1b:cd:4f:04:c1:8c:ce:b0:
7c:ec:a1:23:39:a4:b2:eb:2d:c4:da:73:15:7e:22:a5:03:0d:
6f:13:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:04 2025 by rpki-client