Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: Ijz8Oi2J3pbV3lJL59jzgm00t0HJ2E97xzI5QKjM2u8=
Subject key identifier: 42:C8:9C:E1:A9:08:C8:AD:C2:51:C8:D3:4F:61:5E:A0:37:7D:87:3B
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 0197470BAFD2F063F39C71A7BA7FB678E330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:37 +0000
Manifest this update: Fri 06 Jun 2025 21:00:37 +0000
Manifest next update: Sat 07 Jun 2025 21:00:37 +0000
Files and hashes: 1: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: G0YQTwmqw6GQChYYlilLOxaSVdLqrt2eW46u/Uy4pbI=)
2: qmxsyUbW81VdsinEooDwPTqDgYg.roa (hash: 5mMYBqM+9mhhKL1z8ft7+FIG5whvIdm78M3vwoV475A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:af:d2:f0:63:f3:9c:71:a7:ba:7f:b6:78:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jun 6 21:00:37 2025 GMT
Not After : Jun 7 21:00:37 2025 GMT
Subject: CN=42c89ce1a908c8adc251c8d34f615ea0377d873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:cc:46:2a:96:bc:35:1b:32:7c:4e:a0:68:
d0:eb:7d:1f:67:c1:f3:59:35:a8:74:47:32:6a:66:
eb:c9:3d:1f:c8:1a:80:eb:de:42:6f:87:6b:eb:1b:
bc:63:f9:93:00:af:3e:3a:50:a0:fd:1e:9a:0c:40:
90:83:f5:3f:5a:25:d9:de:45:61:6a:c3:82:5d:4f:
72:ed:43:76:6f:5e:79:8b:8e:78:f7:d6:14:b7:ef:
a9:22:e4:f3:9a:00:4d:62:45:ce:df:6a:99:52:f9:
13:48:e4:43:90:4a:1f:1c:12:66:b8:83:4d:c5:14:
6b:d8:b1:55:a5:72:8a:f1:5e:d2:57:c8:bd:2a:f8:
87:bc:b9:be:ca:2d:0f:1f:bd:e5:2a:b2:fc:cd:db:
68:c1:a6:d8:74:ac:ec:7a:0d:46:90:47:27:9f:0b:
da:bd:f6:b2:5e:25:72:48:36:ff:1c:bc:6f:16:3c:
79:27:2e:63:3b:44:d0:4a:d7:7e:b1:4b:43:36:88:
49:f3:79:d2:b1:20:4e:4c:c6:da:c9:3b:75:5b:3e:
84:59:6d:e3:1c:d4:0f:8e:e4:fe:db:99:93:a1:98:
62:91:1d:74:2c:78:03:b8:d9:15:8c:3f:b8:2e:ae:
72:5d:8f:09:c2:99:18:b5:17:14:54:42:29:96:70:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:9C:E1:A9:08:C8:AD:C2:51:C8:D3:4F:61:5E:A0:37:7D:87:3B
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ac:d4:25:59:ca:52:78:c1:ea:53:55:10:29:f5:55:4f:89:
ee:e6:b8:67:69:9b:fa:38:5a:9f:2e:cd:c2:e0:56:50:1d:26:
81:20:5e:ee:2f:a3:90:c9:be:b3:05:bc:c6:09:86:fb:51:07:
65:80:8c:95:b7:ad:a2:5f:b7:b0:29:ad:78:68:57:57:e3:e5:
00:a2:d6:62:17:ef:48:52:05:81:48:11:3b:ec:f1:09:bf:14:
17:e7:8e:68:e6:d0:85:fd:89:90:d3:a8:0d:84:ee:ad:74:7a:
e9:56:c1:14:fd:9c:e8:fa:ce:63:10:fc:fc:a1:a4:05:68:16:
aa:20:82:33:cb:87:e0:b5:61:1a:b4:ca:3e:4e:22:3f:25:90:
e9:11:00:56:9e:aa:e7:af:18:75:58:7d:fc:f6:16:bc:34:b4:
d8:ca:d4:21:3f:64:75:8b:25:4f:91:13:07:01:28:f0:da:54:
26:14:72:4a:a0:65:9d:5e:b9:b8:a1:90:e7:03:53:a8:60:e3:
89:61:19:79:b7:08:0b:00:f6:c5:88:ca:ef:dd:05:19:4c:cf:
3c:23:71:13:a1:b8:71:22:96:5c:c8:b6:1a:7d:9b:1b:5b:57:
64:00:7d:80:6d:d8:c6:3a:f3:b1:32:98:e1:d4:9f:02:ea:70:
32:17:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:18:35 2025 by rpki-client