Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 58MUX60UC+3NwjDbkKdKJB6zVv8dynVWNijgvHOonMo=
Subject key identifier: 70:B0:6E:49:C0:EA:DC:E2:05:E4:EB:4F:57:12:AA:86:4E:C0:75:6F
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01974855078DE13D7574AB825FF422D5E03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:21 +0000
Manifest this update: Sat 07 Jun 2025 03:00:21 +0000
Manifest next update: Sun 08 Jun 2025 03:00:21 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: pLvZJbI9pH8314/POczrP/72Tui/enUi1FBRugSZXU0=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:07:8d:e1:3d:75:74:ab:82:5f:f4:22:d5:e0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jun 7 03:00:21 2025 GMT
Not After : Jun 8 03:00:21 2025 GMT
Subject: CN=70b06e49c0eadce205e4eb4f5712aa864ec0756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:32:57:8d:15:23:25:48:37:58:12:49:e0:
8a:66:c3:27:30:f3:66:a9:86:0c:1b:5d:91:ad:36:
2b:a8:2f:9d:84:06:5e:bd:86:0f:99:6e:9a:2e:a3:
ad:63:c8:7a:7f:84:93:fb:a7:bb:ab:87:24:e0:d3:
2e:f1:04:7f:9b:4d:15:79:04:f7:af:56:d5:8b:59:
1c:b5:2e:c0:a0:ea:2f:98:58:09:f6:0a:9a:e2:5e:
d5:8b:4a:38:2c:d4:41:2b:6e:3d:fc:86:92:01:bb:
a7:85:b1:d7:a0:46:49:f3:8d:00:a6:20:b9:e2:05:
d7:5a:74:c1:57:67:44:68:08:29:44:95:f4:6c:17:
30:7a:45:57:ec:0a:f1:47:f8:c8:9f:9e:d4:8f:c0:
72:34:cf:70:a6:f8:90:cb:b4:4c:11:29:a9:18:4e:
43:4d:60:ae:0e:a9:8a:ac:bf:f2:25:6d:b5:db:43:
f0:bd:34:57:7a:a3:55:83:b0:3e:f3:12:d1:3d:5b:
84:ae:07:b7:b8:9b:5d:66:10:ee:3c:ff:33:04:df:
3c:db:25:00:24:64:5d:63:88:eb:27:d1:86:72:fc:
68:e1:af:ac:1a:87:0e:6b:b9:c3:fc:98:3f:84:7d:
5b:1a:d2:c7:b1:8d:9d:d1:24:da:01:9d:8e:e6:cd:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:6E:49:C0:EA:DC:E2:05:E4:EB:4F:57:12:AA:86:4E:C0:75:6F
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:fd:5a:09:1f:20:89:5c:5e:f8:ba:d4:9b:2b:d1:9b:82:
9c:bd:1b:30:76:29:8b:c1:2b:e3:e2:04:f6:07:9e:bf:20:c6:
a1:63:fd:40:45:45:e9:ae:66:c4:19:c1:12:0d:c7:f4:4d:6c:
3f:37:26:03:37:d4:ee:78:c5:1a:63:36:22:bf:01:da:c0:81:
61:16:b9:8b:0a:9f:d9:88:ad:b2:54:a4:a6:0f:5d:06:26:b0:
4f:b5:88:2a:26:0a:ab:32:ec:2d:bf:ed:b3:7e:7b:cf:bf:25:
f4:4c:f0:78:a2:4f:82:17:ab:0c:a8:c1:b4:eb:3b:30:da:aa:
eb:5f:e1:77:8d:b5:ab:90:94:dc:aa:56:76:38:af:46:77:e9:
f2:36:43:e5:a0:6a:b2:aa:72:8c:2c:cf:0e:26:49:01:f3:a3:
f4:49:1f:5c:42:aa:4e:c5:a5:b6:bc:0d:a3:2a:9a:6c:16:7d:
7b:d3:96:8a:b5:52:13:9b:f0:a8:0e:84:11:38:3f:70:7a:b0:
c9:ad:c9:10:c9:06:64:f7:67:89:b2:37:aa:e4:06:82:6f:76:
f3:9f:f4:88:0e:97:0d:c7:d0:b8:de:8a:79:04:e3:77:7b:94:
4e:b8:bb:c8:01:b5:08:63:ba:55:bf:f5:a0:32:cc:83:2b:18:
d4:a5:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:28:03 2025 by rpki-client