Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File: lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier: Z+vTlE3cHDk91wDVLqQKIiN1WmsSoL7V35184TCzkkk=
Subject key identifier: 4C:F2:E1:97:64:B6:36:48:3F:85:16:E2:2F:4E:F0:46:68:D8:77:46
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019746D50A86B00FAF774C91A2E664263355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number: 0E58
Signing time: Fri 06 Jun 2025 20:00:56 +0000
Manifest this update: Fri 06 Jun 2025 20:00:56 +0000
Manifest next update: Sat 07 Jun 2025 20:00:56 +0000
Files and hashes: 1: 0YppZtvRSXBHB8NFrLn_rzdM4Wg.roa (hash: AIX2Owt5viXo6Wp2eQTWR2x2rHaX/2g8xn17pbf1zi4=)
2: EKnIHBjVrQVGKttI-rFo2gf2VFc.roa (hash: J3kh1NFjTixOap26aJDcz17JVV8gbZy6u7PZjGr/JnE=)
3: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (hash: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=)
4: LaP9yZWFLbz-vA6yy7WQjmvmnXk.roa (hash: dSsBDcLcDlWyNXwHKuTffodeoLPC9SNQ0Byy4wB2Z1w=)
5: LbH9hJaSL1GOYzLXqD3Awd_qjoA.roa (hash: 3C2M+kU6uA2Qd0GYC2WkAPgI2BlaHp4MqS4lT08EAiA=)
6: PbarvFD-DfboyTwmYNWYW4W2R9w.roa (hash: x10XcqhvaDHkUVsBFH7jM56sVdDbvr2ZFm9l+eYW+G4=)
7: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: MKkNUwl4FhBuCdfO5d4q7Tb8jMGZkH5IkqzykErTY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:0a:86:b0:0f:af:77:4c:91:a2:e6:64:26:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 6 20:00:56 2025 GMT
Not After : Jun 7 20:00:56 2025 GMT
Subject: CN=4cf2e19764b636483f8516e22f4ef04668d87746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:f4:0d:46:8c:b9:ec:50:a9:da:c7:57:1b:
74:32:38:d1:65:20:ec:b5:16:33:91:15:3b:e2:75:
c0:d0:71:6f:90:4a:8a:99:49:1c:6a:94:53:5e:f8:
60:dc:43:b3:5e:00:e6:81:74:b9:11:53:36:3c:ae:
e7:f5:4b:2d:52:29:77:45:80:4f:96:55:32:cf:60:
72:41:9d:ec:cd:f8:a7:d2:88:be:f3:05:72:67:7f:
1c:29:60:ed:dd:35:81:df:7a:86:65:46:eb:cc:d0:
77:99:44:cb:5f:72:f0:3c:3d:58:b9:57:12:63:58:
4f:78:20:d8:c4:7e:51:cd:5e:c2:75:a4:a0:d3:ae:
19:e4:18:8b:48:55:59:0f:71:b3:38:c5:ee:8a:da:
c2:98:cd:80:56:d4:a7:83:e6:88:04:3d:88:f6:d1:
68:3f:26:af:3d:75:ae:2f:14:eb:b6:94:8c:c0:85:
d1:d5:df:f5:85:0d:8d:f6:fc:1f:a2:81:04:07:bf:
4a:c7:b4:85:8a:96:8b:ba:43:fd:1c:b9:a0:4b:4d:
ed:c4:6b:c4:f9:03:78:02:98:f0:bd:ac:ea:f3:4b:
05:21:f6:89:3f:fa:54:2d:83:9c:1b:9a:fd:1f:3d:
2a:12:4c:ac:29:57:83:51:df:41:78:fb:6a:b2:ef:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:E1:97:64:B6:36:48:3F:85:16:E2:2F:4E:F0:46:68:D8:77:46
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:db:1a:a8:61:ee:d2:ef:14:a8:19:3a:30:f9:b2:f9:c3:
1b:51:65:00:36:6e:17:2a:64:31:31:1e:ad:b8:1d:95:a6:8b:
75:8c:50:71:a1:81:90:2c:fb:9d:0e:52:f3:a0:66:69:20:37:
98:f3:b6:b2:ee:b5:29:61:ea:5d:4f:42:ca:e7:f0:a1:f5:99:
fe:fb:89:1f:7c:07:06:30:6f:9e:f4:be:72:9b:36:6b:a9:80:
29:49:32:90:59:90:91:13:e2:03:23:03:a1:50:af:f8:7c:cc:
8d:30:e0:c4:a8:3c:7d:bc:8a:51:cc:7c:30:fb:26:7b:fa:07:
94:51:d5:3f:f6:3b:c8:c8:0d:ee:88:b8:12:0e:eb:3a:92:4e:
2e:1f:6a:18:82:74:4a:9c:b2:3d:e8:ef:8b:76:31:cf:b3:b0:
93:5a:29:9c:89:c2:49:2c:1c:1e:06:9e:0b:61:e6:94:c4:bc:
ec:92:ea:0f:28:22:2d:9b:6b:8a:58:10:95:e3:54:d4:00:a6:
8f:47:d4:34:44:5f:3a:30:a4:c8:4e:c8:c9:33:33:54:a8:d7:
d9:3f:82:a2:ee:09:ac:d1:41:8b:bc:ba:1f:8c:06:09:4d:c2:
2f:8f:bf:6d:09:1d:37:36:a8:d0:ab:3d:9d:8a:c4:b7:59:40:
b3:18:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:34 2025 by rpki-client