Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: HYTC0r6SIAU+Qtoc5Dbq5tfmslYRmwctBbEBYWLuCxY=
Subject key identifier: E0:70:98:F4:87:F9:B9:85:89:ED:0E:3F:34:A8:06:CA:AE:E5:93:11
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01974AE8EEBD21A47B28167F84C6494E9090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 06F3
Signing time: Sat 07 Jun 2025 15:01:08 +0000
Manifest this update: Sat 07 Jun 2025 15:01:08 +0000
Manifest next update: Sun 08 Jun 2025 15:01:08 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: hJmvV5JsXrcg7X9y7V8zg5IRIeoOvxM188zaq6KtIxQ=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ee:bd:21:a4:7b:28:16:7f:84:c6:49:4e:90:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jun 7 15:01:08 2025 GMT
Not After : Jun 8 15:01:08 2025 GMT
Subject: CN=e07098f487f9b98589ed0e3f34a806caaee59311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:86:64:d3:16:df:62:10:04:d2:e0:5f:83:
ba:5f:ae:20:f0:54:87:4d:b0:91:ce:dd:14:46:d7:
6e:0a:de:33:26:d1:00:d0:8f:52:63:69:5b:90:fe:
15:6d:38:da:b6:f0:e2:b7:b4:a2:e5:98:a6:b3:df:
40:5a:a4:8d:65:c5:0a:95:d7:e1:0c:c4:0a:09:7f:
0e:2e:fc:a7:0c:f6:fb:30:58:c4:39:39:57:72:b8:
76:34:13:ff:01:fb:15:b7:54:86:4d:61:d1:bd:c9:
86:b1:42:ba:5b:08:d4:a3:26:d1:4f:50:60:20:c1:
ff:be:c8:8d:59:34:35:32:2f:d5:0d:21:44:ad:fa:
26:89:5f:a9:81:bf:f6:0e:58:77:20:0c:30:75:ed:
94:7b:4a:f7:d6:76:27:49:9a:5e:67:f1:fd:bf:20:
6b:12:5b:28:31:3f:f4:aa:61:bd:c6:a4:97:d7:35:
88:79:26:71:87:cc:64:49:1e:72:ee:02:84:41:61:
95:68:e1:e5:d3:4a:7b:78:67:ad:51:4b:7a:1d:47:
cf:da:b7:6b:b7:07:2a:72:ff:85:5e:0b:8c:06:3f:
c4:dc:a2:a5:c2:27:30:17:e6:e6:d3:24:ad:84:65:
d6:60:c8:4b:b2:8d:86:1c:30:ed:26:50:95:93:1b:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:98:F4:87:F9:B9:85:89:ED:0E:3F:34:A8:06:CA:AE:E5:93:11
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8e:80:36:ac:74:51:a4:49:d4:4c:40:6e:8f:bb:04:48:bf:
d3:d1:32:b1:25:11:d9:dc:17:fb:24:c2:77:78:dd:47:96:fc:
08:23:4a:6d:6d:7b:1b:f5:70:55:f6:0c:71:f1:95:86:98:1b:
1b:11:9a:a9:cc:f2:d2:af:31:46:d8:4a:a0:f2:12:22:63:fe:
69:b5:62:86:db:02:20:97:3a:c2:e3:4e:83:e8:77:7d:98:f4:
bf:ce:c0:da:a8:32:50:95:68:a7:b0:0e:3f:d0:43:c0:69:34:
66:46:d0:de:a3:c3:2f:b2:cb:e2:77:e6:9f:e9:7b:54:b9:cf:
54:d2:63:34:8a:87:7c:14:7a:0d:51:c3:e3:9c:67:1a:6b:e5:
d8:90:0d:56:e9:dc:01:99:6b:5a:d4:a4:dd:35:4c:cf:4b:96:
df:bd:95:6c:0a:41:7c:6c:b6:5e:77:9a:99:47:42:0b:02:bb:
0b:a9:1a:b1:fd:ca:0f:43:01:e2:72:4f:9d:d4:d2:78:91:41:
a6:97:35:98:1f:de:01:6d:a6:e1:c3:69:d8:bb:53:2f:e7:ce:
97:ff:c6:f4:d5:a8:e5:f0:27:3f:fb:47:d3:b9:6b:5c:fe:42:
f2:45:61:bd:72:5b:3e:2b:bc:fc:91:8b:27:95:19:0a:ae:93:
be:d3:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:29 2025 by rpki-client