Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: qxzGHsOSmbWr1eXDIccnyAMjcRHNsZCF/jpqFj+AS2c=
Subject key identifier: 39:42:FE:27:0D:7D:9D:86:41:B3:FE:89:22:1E:CB:DC:29:F7:B1:EF
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0197469E0BE761FAE15D5DBCE7420A17AD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1553
Signing time: Fri 06 Jun 2025 19:00:51 +0000
Manifest this update: Fri 06 Jun 2025 19:00:51 +0000
Manifest next update: Sat 07 Jun 2025 19:00:51 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: Yit0/7l4cExC3cSmDI0e+JEAaJ1NJLPX/Dd80z/FbMI=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:0b:e7:61:fa:e1:5d:5d:bc:e7:42:0a:17:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jun 6 19:00:51 2025 GMT
Not After : Jun 7 19:00:51 2025 GMT
Subject: CN=3942fe270d7d9d8641b3fe89221ecbdc29f7b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:09:94:5e:35:29:ca:16:f7:a8:87:06:01:
89:82:19:4b:a2:89:f7:62:7a:0f:cc:bd:0c:27:0f:
f8:05:0b:19:a3:75:59:c8:7f:28:57:34:6a:38:f0:
1c:88:a2:6f:8d:c4:67:07:62:82:5f:64:ad:0b:53:
9b:4e:93:8c:41:e7:ae:ca:ab:20:c2:51:97:a8:31:
8c:3c:d1:32:b6:5d:b2:28:b5:3a:ee:97:b0:d1:bd:
41:b7:61:a3:5d:00:d2:c8:20:c5:78:05:f4:84:f9:
2e:dc:43:95:7f:5b:42:1f:02:d0:f1:01:75:8c:33:
03:f1:2a:70:bd:a5:37:5f:3b:23:4b:cd:1f:c8:42:
3f:9b:1d:e0:b6:d2:3f:0b:e6:95:bf:e2:82:bf:0b:
9e:35:65:67:4c:62:59:b4:8e:cb:fb:f9:b9:e2:37:
0f:21:3f:f3:26:56:e5:0d:4b:b5:d6:a6:10:61:e0:
0f:54:5d:8c:64:5e:01:99:7b:11:08:24:c1:22:d5:
4b:f5:da:b6:2f:12:f2:6d:51:27:c4:2a:85:c6:03:
95:8c:79:2e:27:fc:d6:29:f4:8b:58:de:c8:01:0e:
34:c2:18:91:b6:51:40:aa:60:c8:01:e9:5c:a5:67:
af:23:2f:61:d0:61:d5:6f:aa:51:eb:c9:9f:db:75:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:FE:27:0D:7D:9D:86:41:B3:FE:89:22:1E:CB:DC:29:F7:B1:EF
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c7:55:77:f1:d6:62:28:21:7b:c9:b4:c5:d8:5a:30:54:15:
91:34:5e:8a:15:f9:a6:b1:71:3e:07:35:43:49:32:ff:54:4c:
3d:eb:e1:bf:b6:ce:d0:dd:56:f4:78:ad:ed:b7:84:19:b8:ab:
08:30:21:dc:91:0a:1e:15:a8:3f:fa:62:a0:c6:20:9d:69:83:
63:23:a2:36:cd:27:e6:ec:86:78:54:a7:ab:55:42:7f:d1:c5:
94:3f:f1:39:f9:8e:6e:a5:85:0c:a8:36:77:c3:d4:58:ee:f5:
5d:e9:34:7f:03:bb:5f:9a:61:0b:c6:7c:3f:17:2f:c5:42:5c:
ac:4d:13:e0:5c:e3:7f:40:1a:ae:57:c8:a4:19:55:79:38:52:
2e:6d:74:d7:a6:4c:a2:c2:56:60:ca:6c:08:49:2e:54:79:2f:
55:1d:6b:db:d4:a3:76:88:dc:89:52:dd:37:40:9f:b3:c9:f8:
cc:ef:e1:aa:cb:14:33:8a:55:c4:c0:85:b3:8f:a6:40:38:ce:
86:7a:18:c0:b0:7a:e4:13:a9:46:cd:b8:f6:03:9a:71:03:e2:
7a:a8:ad:db:69:85:25:25:82:fa:3a:a9:e9:a3:c3:c3:1b:a3:
0c:7c:11:70:e4:38:8c:2e:f9:88:f4:da:d8:3d:49:15:d5:d4:
9c:79:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:08 2025 by rpki-client