Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: K+4rBO1lKkmmuqtGy85s35mtBpbDS49NzC6uC2SaiJI=
Subject key identifier: D8:42:FE:F4:CD:97:13:2D:9D:A7:66:22:8B:70:D5:D7:8B:30:1D:84
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01974CA00F8194A1021499742657ACF8B4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 90
Signing time: Sat 07 Jun 2025 23:00:47 +0000
Manifest this update: Sat 07 Jun 2025 23:00:47 +0000
Manifest next update: Sun 08 Jun 2025 23:00:47 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: +E5q9z5IhUCamwO09Fz2rg1zltiLx3acqS/mCaRxM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:0f:81:94:a1:02:14:99:74:26:57:ac:f8:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Jun 7 23:00:47 2025 GMT
Not After : Jun 8 23:00:47 2025 GMT
Subject: CN=d842fef4cd97132d9da766228b70d5d78b301d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:7f:1a:2c:69:68:e6:b9:9e:34:03:65:c1:
6b:7e:d3:fb:ad:0e:86:b0:8e:62:94:6b:62:c4:e4:
79:3d:16:f3:22:b2:45:ff:4f:05:a6:39:73:2b:c1:
c2:4a:3a:87:08:0b:42:78:d4:18:6c:be:48:bf:70:
af:f8:88:be:32:3e:bb:15:ec:75:f6:29:12:2e:a8:
d1:f7:14:27:0b:1a:f7:e3:01:7e:a0:89:a8:b0:e0:
34:96:b7:5c:d8:90:02:2b:60:40:04:e7:5b:a3:39:
40:7a:cd:b1:04:dc:7d:80:c0:13:f1:a6:6d:76:09:
0c:c6:b5:fc:4e:8d:52:dc:7b:3d:23:f1:b4:e6:55:
37:9e:3f:3f:c7:7e:e9:cd:a8:f4:8f:4e:92:5c:10:
74:12:cb:e8:a7:48:bc:d1:c0:2f:a1:12:e5:58:43:
5e:6f:a6:92:bb:86:6f:35:ae:04:6a:79:6b:ff:7b:
91:e6:5b:47:0e:46:24:16:f3:e2:bd:a0:92:5b:59:
d5:30:06:62:17:3f:72:8e:43:57:17:16:57:98:ba:
01:45:7d:e5:f4:57:5e:90:d5:cb:9b:58:54:d5:7c:
0e:f6:06:f0:da:02:9d:44:85:be:6a:c5:8a:5d:99:
40:98:57:f6:34:47:3f:06:8c:3b:88:49:2e:f0:d6:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:FE:F4:CD:97:13:2D:9D:A7:66:22:8B:70:D5:D7:8B:30:1D:84
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:07:b1:48:ee:7b:a9:b5:0d:0a:ce:fb:58:6d:cd:84:52:
7e:05:33:32:00:98:44:5c:71:b0:cb:ac:4a:cb:d4:c1:fe:0f:
14:6d:ac:b2:88:ff:91:81:f3:fa:68:4f:c3:67:8a:39:e9:4f:
47:3c:44:e5:11:9d:7a:08:47:db:b0:68:4e:ba:b2:0f:c8:98:
67:e9:be:8b:ad:e5:a2:8d:f5:25:84:7c:26:b1:a2:72:db:76:
05:99:ae:e8:9c:79:fd:80:2e:10:38:ad:b3:a6:be:1c:d4:a6:
0a:18:ad:ee:f4:80:4c:e3:ca:30:0a:6a:d7:de:ad:24:bf:6e:
2e:03:aa:30:c4:f1:57:59:85:9a:6a:39:34:15:07:36:55:da:
fa:f8:b8:d7:c9:ae:19:c9:dc:00:25:41:ed:cd:0e:3d:f4:3c:
88:d7:4d:55:a2:a9:53:d6:32:64:20:b6:ce:c6:93:b5:01:2c:
51:3d:7f:7b:cc:50:19:f5:5a:a6:10:ed:81:9b:b1:22:93:84:
f3:ff:64:0f:67:4b:fb:49:ad:b5:b3:f3:9f:27:d7:f0:c4:b1:
64:5e:d1:35:b9:83:09:09:f9:6e:01:ff:b3:f4:61:a6:4a:df:
44:99:9c:95:99:f0:85:10:68:20:df:89:d3:7e:61:fa:b4:6c:
e4:47:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:51 2025 by rpki-client