Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: kum84sDzOfnTcwTQjduqoWIf6ZuCBaZUYld0h9Sa6VU=
Subject key identifier: C6:5F:C9:96:C8:49:C0:22:66:AE:C7:8E:3A:9F:AD:F3:37:7C:71:11
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 01974D4494681FF61EFF087E51DC5D1982D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 1434
Signing time: Sun 08 Jun 2025 02:00:29 +0000
Manifest this update: Sun 08 Jun 2025 02:00:29 +0000
Manifest next update: Mon 09 Jun 2025 02:00:29 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: t88CiJZSYz/vMwsdwZqBaT3vnQjt8W4qWHwEOX0pipk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:94:68:1f:f6:1e:ff:08:7e:51:dc:5d:19:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jun 8 02:00:29 2025 GMT
Not After : Jun 9 02:00:29 2025 GMT
Subject: CN=c65fc996c849c02266aec78e3a9fadf3377c7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:4b:cf:ce:5a:21:dc:e4:f7:f6:de:66:e5:
4f:70:2f:42:ea:ca:33:3b:ec:40:60:ea:6f:ea:ee:
71:da:58:49:99:47:21:af:c2:07:ed:9a:39:2c:36:
c7:c6:a4:0e:f1:62:e5:a1:f7:7b:60:af:65:eb:b4:
ad:b1:88:e0:fd:1a:9a:26:b4:a6:0d:fb:72:60:a9:
d0:7e:44:ee:c3:21:8b:29:a0:25:a5:f4:05:12:ce:
0e:15:b0:75:bc:1f:f5:08:ae:c7:5d:be:33:23:ed:
01:e9:7e:54:9c:c2:ee:0e:1a:04:6d:0e:03:9c:c0:
68:c8:af:d3:be:1c:10:b2:23:c8:f3:3a:7e:35:fb:
ec:1a:23:3f:ec:8f:8a:46:cb:ee:a9:b7:d6:e8:66:
9f:a7:40:e0:f7:31:6d:a4:12:b8:f5:85:d5:67:b8:
30:23:dc:08:06:23:18:16:cc:ef:90:bf:df:f6:32:
06:dc:ad:3c:54:4e:40:94:78:a9:45:91:8e:b1:a1:
f9:d3:b8:a7:72:80:55:a5:f6:53:8d:c5:6e:fc:20:
9e:6d:cd:dd:f6:ed:57:51:6a:d8:b4:4d:97:96:8b:
bb:04:e1:76:e1:f9:92:b2:dc:01:cd:43:94:3e:d7:
78:74:b3:64:dc:41:c0:dd:dd:f4:fc:50:28:84:2b:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:C9:96:C8:49:C0:22:66:AE:C7:8E:3A:9F:AD:F3:37:7C:71:11
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ed:14:a9:d9:c7:46:84:5e:0b:91:5a:d3:06:34:e8:c4:4a:
74:0a:19:a0:ec:5d:02:73:1d:ff:86:7f:72:db:6c:dc:31:af:
b2:c0:e0:49:7c:9c:40:45:1c:0d:90:4e:80:43:c7:2c:13:f0:
3e:6e:8d:5c:b8:c6:7a:89:dc:ac:99:8a:ef:0c:f7:fa:4a:df:
1d:eb:4b:bf:73:5d:d6:9f:bd:9a:ef:e7:78:84:4a:7f:7c:9f:
f6:cf:63:17:5f:09:15:68:f0:35:95:a4:26:49:5f:83:f3:e3:
12:a3:ad:d1:2f:02:47:01:34:48:4d:bb:83:f7:b2:ab:9a:c5:
3e:35:25:08:66:7e:40:ca:e1:97:86:49:60:57:c2:b2:1f:f7:
3d:65:39:16:cd:b5:2c:18:1a:d1:3e:05:e1:2d:48:85:b9:06:
2f:c3:4f:37:9c:d5:b0:b3:9d:4f:72:6e:86:a8:92:71:52:ad:
ea:43:76:a3:5d:7d:64:9e:bc:c1:d8:11:e7:35:6e:fa:5c:cf:
7d:3f:1e:1d:2b:a4:5a:a0:e9:e6:27:b4:2a:a9:71:2b:3c:6a:
7d:6e:ba:5a:1b:f3:f1:dc:22:28:07:e1:33:41:c6:1b:ce:e5:
e7:0c:5c:e9:bc:ab:99:fa:06:ee:87:fe:b3:13:75:d9:7d:74:
19:e2:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:57 2025 by rpki-client