Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier: h1aF2duSb3x2oSpxR5FMozYeqzZjr/INR67atb1Ie7Y=
Subject key identifier: 11:68:A8:68:66:BA:57:17:B8:BE:1B:62:00:E9:A8:CB:7A:28:7E:81
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 0197496837F50EE53F875E841B799C16B819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number: 0B42
Signing time: Sat 07 Jun 2025 08:00:56 +0000
Manifest this update: Sat 07 Jun 2025 08:00:56 +0000
Manifest next update: Sun 08 Jun 2025 08:00:56 +0000
Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: ohbCwUqmPtzkhGtuhgw/CwWYK1eAVZ7F1pG1raYFnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:37:f5:0e:e5:3f:87:5e:84:1b:79:9c:16:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Jun 7 08:00:56 2025 GMT
Not After : Jun 8 08:00:56 2025 GMT
Subject: CN=1168a86866ba5717b8be1b6200e9a8cb7a287e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:30:24:4e:33:7c:e5:09:41:28:6e:ab:5f:
c2:1b:2c:05:f3:02:b1:8f:ad:e7:36:2d:6e:af:4c:
d5:d3:cc:bf:4e:bc:70:79:1a:78:f8:77:31:44:b8:
94:a3:fe:05:19:1a:be:a2:b0:24:f9:99:96:3e:39:
a7:85:b1:d7:49:9e:e9:7d:f6:65:8f:a5:75:b9:c9:
57:0d:6c:7d:8d:75:3c:d4:ec:1d:77:1b:d2:f1:38:
33:a0:66:83:f2:ab:4f:ea:0f:c4:62:b8:47:6f:93:
6a:d6:cf:d1:42:f5:23:2a:69:23:ae:64:71:15:bd:
e7:6f:3b:39:f0:dc:a7:47:bb:87:02:17:d4:12:78:
b8:2b:be:e0:74:e4:86:a6:fa:21:e6:e9:18:0e:05:
f5:2b:79:25:e3:cc:1f:cf:b3:d7:c9:65:e9:7a:7a:
60:8d:9b:0f:ff:e0:83:a1:96:35:d2:35:01:76:99:
95:dd:47:94:2c:98:08:6d:d7:e7:09:8d:a9:e2:e6:
e8:d8:39:03:a7:a7:31:6f:e0:07:91:68:a3:76:a8:
81:3e:74:ea:5b:b5:c3:39:59:10:88:b5:7c:95:b1:
1c:bc:79:5b:37:ad:1a:fd:1e:95:58:c0:bd:a1:5a:
35:4f:58:38:71:fe:a1:fc:7f:9f:4f:d0:ac:45:8d:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:A8:68:66:BA:57:17:B8:BE:1B:62:00:E9:A8:CB:7A:28:7E:81
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:6e:a6:d0:d7:fe:82:6a:60:42:ad:1b:df:ea:ad:e8:cc:
3b:20:ad:e4:1c:a6:7e:d7:21:6c:5a:ff:4f:98:80:1b:ff:ef:
ba:cf:13:ef:d7:fc:3c:5e:af:1b:5a:6b:66:2c:4f:31:86:22:
97:32:42:87:1d:9c:44:25:77:b9:e8:bf:fe:d1:ee:a1:2f:b5:
08:01:12:6b:69:8c:05:0b:6d:99:df:71:4f:33:bf:d2:76:2f:
9a:12:54:a1:c0:57:70:eb:01:3c:63:15:9c:50:db:4b:1e:4a:
a1:f9:43:41:22:cd:c3:d6:f9:49:40:d8:17:8e:b9:db:b1:d7:
00:f0:4c:57:0f:c1:3d:d1:34:64:8b:df:fe:ee:13:35:c7:89:
50:07:73:9d:8f:b3:0a:65:c7:43:78:d1:7f:20:48:c7:be:31:
78:96:ca:9e:86:24:ae:42:5e:10:f1:7d:a1:25:db:99:ca:24:
61:9c:28:b4:87:8c:57:7a:2f:c3:14:4f:95:24:6a:54:58:ee:
7d:45:09:0a:a0:3e:64:7d:c7:31:b1:55:9b:7a:ae:c5:4d:f6:
ef:70:aa:99:d2:2c:01:5e:5a:97:79:9d:ad:1c:27:a9:9b:4e:
a2:43:bb:b1:c6:bb:4a:b6:69:31:95:a4:88:9f:ab:f0:3a:8b:
cf:25:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:41 2025 by rpki-client