Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: mb69+Rus7ovXdHtXl/GatIXyTbfGdGetFKKzTcYjjpw=
Subject key identifier: DF:13:91:D1:54:35:9F:F5:0B:CC:17:E1:B3:85:92:6C:D1:A1:BC:43
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0197470C3DA26E70C58AD77F4041514282AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0B57
Signing time: Fri 06 Jun 2025 21:01:13 +0000
Manifest this update: Fri 06 Jun 2025 21:01:13 +0000
Manifest next update: Sat 07 Jun 2025 21:01:13 +0000
Files and hashes: 1: 8eAv8sSKqCobRHi1pPcWZI3QV5o.roa (hash: me5Ypddt6zuTrOyc9m6TejNlArKlNxDqSv65dSh/DKk=)
2: W3qS8ccHplCENHnAWCXalJ4Lxq8.roa (hash: h3ysUJyoiR9Pxj5SMBpAdJdk3U65tHclFMzHCEEhX4k=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
5: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: qmdEUTvPqAwEZsjBIAZw4iYo/jxt9XLCyJmM9ZSoZI4=)
6: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:3d:a2:6e:70:c5:8a:d7:7f:40:41:51:42:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jun 6 21:01:13 2025 GMT
Not After : Jun 7 21:01:13 2025 GMT
Subject: CN=df1391d154359ff50bcc17e1b385926cd1a1bc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:65:66:c3:e0:a8:67:1d:e2:1e:ea:8b:37:
15:fe:7b:0a:a2:5c:f1:c6:14:eb:7c:df:5c:fb:1c:
8c:6d:d2:54:b2:42:a9:8f:ea:b4:92:60:9d:65:35:
5b:45:d3:a1:6f:d7:4b:9e:f2:a3:16:bb:c0:0c:3e:
ca:d0:b9:76:bb:3c:c8:58:d1:6b:6a:3f:82:1d:fe:
9f:c7:33:c1:4c:7a:e1:f9:b8:38:36:c6:06:86:e0:
4f:44:bf:a9:7e:7c:4b:e5:f8:0d:0e:5a:ac:4b:66:
19:ad:cd:d6:a8:ee:6b:e4:77:8e:5f:86:28:8f:5f:
b5:ac:b1:de:c4:a6:82:15:49:1e:60:c0:77:4c:e4:
ab:53:cb:73:66:f6:a0:04:6f:b1:eb:6d:96:1e:2e:
85:28:de:5e:b3:de:43:66:64:b3:fa:09:da:49:aa:
54:61:ea:eb:ed:d5:13:b3:8f:ee:9d:0a:47:c9:26:
1e:77:6a:b5:d2:ca:55:22:19:fb:79:b5:07:64:b0:
a2:86:d8:39:80:c0:14:16:88:10:98:35:2b:d0:d3:
a7:ee:24:d5:7e:a5:84:04:05:c6:29:b5:21:a1:91:
96:02:57:eb:d7:72:4d:88:24:f7:06:fb:26:c0:de:
ed:e3:65:f9:9b:13:d5:20:02:5f:40:f6:f6:ee:d9:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:91:D1:54:35:9F:F5:0B:CC:17:E1:B3:85:92:6C:D1:A1:BC:43
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:30:15:21:a9:ee:dd:93:3a:42:70:59:04:69:cd:9e:fb:58:
eb:00:2f:2c:97:8f:ce:9a:03:53:c5:8d:6a:f3:14:47:0c:90:
03:80:f4:03:0d:0e:10:0a:c5:a0:95:96:3a:78:be:bf:f1:d1:
87:74:12:20:f8:17:d0:7d:47:d2:2c:13:17:54:95:d8:d7:af:
de:be:90:58:65:6c:af:ae:ef:df:ed:bd:3c:41:c6:80:6e:39:
cb:24:9c:1d:9b:f8:1c:1e:bb:52:fe:5c:97:96:df:e1:c2:23:
6f:fc:86:32:ea:aa:1f:0d:fd:3b:e8:a4:ff:5f:c7:06:0a:ba:
52:cc:85:29:2d:47:c2:eb:d1:5d:c3:8a:37:a5:a9:c5:61:a7:
ca:36:dd:6e:72:e8:d8:bc:e7:77:41:97:8d:56:77:78:48:db:
b5:71:da:91:a5:fe:b0:0c:a9:ef:cf:5a:b8:06:6e:cf:72:52:
7a:3a:41:c3:d8:cf:79:be:2a:5b:40:35:43:72:22:84:90:e6:
52:54:04:a5:e2:a0:f0:26:69:69:c0:00:f4:a0:b0:50:7f:47:
25:d0:7f:ed:57:cc:66:6c:16:22:5a:d0:d0:93:90:78:1f:02:
2d:d2:6f:b6:85:7f:6e:0e:e8:00:3b:fb:cc:7b:e5:23:40:51:
b2:36:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:39:10 2025 by rpki-client