Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: q9dRl9dSooNQEVGH8W5T+WAJSG6nh5kJNIkag2hp0vY=
Subject key identifier: 39:E9:4E:ED:B5:08:A9:76:E8:3C:13:F6:1A:AF:90:FB:80:C9:9E:71
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01974B561D8EF6C2C9F6DD72E0E30425B7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1138
Signing time: Sat 07 Jun 2025 17:00:24 +0000
Manifest this update: Sat 07 Jun 2025 17:00:24 +0000
Manifest next update: Sun 08 Jun 2025 17:00:24 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: /k1fwvavuXdZQVdQFYUEz1EhE+758BxMuTSUyXvWHhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:1d:8e:f6:c2:c9:f6:dd:72:e0:e3:04:25:b7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jun 7 17:00:24 2025 GMT
Not After : Jun 8 17:00:24 2025 GMT
Subject: CN=39e94eedb508a976e83c13f61aaf90fb80c99e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:f0:4b:3b:2a:c5:a5:d8:39:e3:09:4c:b1:
1b:bf:08:16:69:de:fe:66:ea:85:07:ed:20:f1:c8:
b6:89:e7:8b:eb:13:8b:19:0f:18:0d:e7:e2:ac:86:
fa:f4:12:80:c2:70:d0:6d:77:b3:f0:d2:e3:f3:1b:
63:9d:1a:57:0d:50:ff:80:68:19:8e:28:69:18:54:
5b:d1:e1:d6:4f:26:f8:ff:4d:33:4e:5b:a7:76:65:
1d:b1:4a:12:eb:dc:f6:e7:33:14:31:31:aa:dc:36:
29:5d:0a:a5:2a:d2:66:62:f8:2a:4b:6a:d6:a0:40:
fc:87:53:00:d0:1a:f3:0d:9c:49:88:d3:20:de:48:
74:2b:d2:dc:b5:80:39:71:49:81:b0:24:76:4e:85:
a4:c6:47:68:80:ac:d5:6e:ed:a8:80:2f:52:03:06:
82:75:97:14:da:66:54:c8:af:11:0d:e4:05:6c:79:
c7:e0:0c:1e:bf:d8:c9:1c:bc:2e:33:73:3c:e5:17:
e0:ea:6e:45:39:bc:e8:44:cf:de:f3:2d:f0:f7:6d:
3b:13:3c:a2:fa:73:4a:3a:4f:f5:70:f1:76:f4:47:
72:4b:99:1f:09:ed:a9:ed:17:d8:16:25:3e:a4:15:
09:b2:5d:69:a3:ee:9c:e4:97:bd:16:34:0f:80:29:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:4E:ED:B5:08:A9:76:E8:3C:13:F6:1A:AF:90:FB:80:C9:9E:71
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:18:77:96:5a:ff:b5:09:7e:dc:3b:1a:14:9e:f5:e1:81:ba:
ae:c4:e4:98:92:69:c1:8e:f2:8e:71:88:78:7e:f1:53:de:a9:
f2:f1:19:3b:1e:4b:93:fa:56:0d:08:df:6f:56:d8:4b:00:5d:
87:a6:f7:10:d9:ae:56:5c:b3:8d:55:43:37:25:76:4f:f1:91:
5b:22:e5:04:07:70:32:0c:dc:32:3a:dc:a5:b1:33:9d:a5:45:
f9:05:f2:db:d8:ad:5f:f0:9f:02:99:9f:c9:81:63:09:eb:fd:
be:f1:62:f5:ae:dc:eb:79:78:72:6f:61:83:ad:61:4b:88:5d:
18:01:b0:8e:e7:5d:7f:cf:18:d6:cb:55:74:00:1b:a2:cf:df:
36:a5:8a:54:c3:8f:9b:01:ea:93:06:d8:38:27:54:3b:62:88:
1d:fd:68:7b:78:bf:26:f3:d4:42:cf:1a:0e:7b:29:44:5b:f9:
08:dd:5f:64:da:28:a2:bb:67:83:6a:e8:50:f6:af:79:0a:84:
dd:43:44:ac:5d:46:b1:60:d4:9f:a3:4a:95:94:2d:98:45:43:
96:9a:4b:b3:ed:50:78:6c:e1:79:df:02:6e:11:21:f5:8a:74:
5c:b7:91:33:3e:11:34:27:4a:af:f8:8e:97:8d:39:d5:c2:30:
8a:c9:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:08 2025 by rpki-client