Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: 5yNwY153LBPxibLRkdrw0IsquMMoKYyY59q4T3cOSeY=
Subject key identifier: A0:F2:C7:A2:11:57:37:E2:66:89:36:20:BF:FD:FA:2B:10:8E:B2:34
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 019754903D404E8D3DD58BD6526C24CFD56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 10C6
Signing time: Mon 09 Jun 2025 12:00:28 +0000
Manifest this update: Mon 09 Jun 2025 12:00:28 +0000
Manifest next update: Tue 10 Jun 2025 12:00:28 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: dzppPi+JDRQs2RoJCcyJqka22JODv1uqUweFchpwpsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:3d:40:4e:8d:3d:d5:8b:d6:52:6c:24:cf:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Jun 9 12:00:28 2025 GMT
Not After : Jun 10 12:00:28 2025 GMT
Subject: CN=a0f2c7a2115737e266893620bffdfa2b108eb234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:ff:ea:d3:15:3f:8b:e6:d2:4c:dd:65:2b:
74:aa:c7:97:ab:88:3f:0a:5a:7b:e7:2f:cb:60:90:
d2:fc:e9:c5:1e:6b:56:0d:67:d1:52:bb:2d:a7:da:
5a:3d:c2:fb:6a:44:a7:52:55:8a:50:c7:22:c1:4f:
f6:79:95:18:45:5a:09:9e:ab:81:57:3d:92:49:97:
59:96:c2:5f:e4:b3:9d:7b:f9:9e:2b:07:e0:3b:55:
bc:08:df:cd:39:47:80:3c:3d:c7:2b:0f:10:d2:02:
76:0f:16:bd:e7:97:b5:77:9a:b5:d3:cb:cc:9d:1d:
58:94:22:d7:ba:73:f1:c1:d5:22:97:21:ac:d5:fc:
02:41:bd:79:6e:1b:41:e0:44:51:b3:33:b1:b4:d8:
5f:a7:9a:34:86:a4:28:97:71:2d:f0:dc:02:44:44:
15:49:99:9b:32:40:17:b2:70:75:19:9b:de:82:ef:
da:39:68:65:99:ba:b1:46:9e:dc:22:38:0b:7f:29:
19:34:7c:29:0a:07:d3:83:79:8e:c1:ca:68:4d:9e:
f7:c7:0e:fe:e7:98:8d:67:66:05:2f:00:b2:26:d2:
71:46:d9:a7:45:8d:3d:3d:ff:e4:28:69:fd:4d:99:
69:90:56:5d:7c:ff:b8:6d:44:67:5e:ff:39:87:ab:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:C7:A2:11:57:37:E2:66:89:36:20:BF:FD:FA:2B:10:8E:B2:34
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cf:8c:ae:40:8a:c0:1e:f4:9f:ef:72:0f:c0:66:8b:93:9f:
52:72:f0:e9:47:da:a7:9a:ed:aa:f0:c1:6b:3a:18:d3:4d:b7:
a4:68:ff:f4:39:0b:cc:e2:15:24:69:82:f5:47:37:55:26:d1:
8f:8d:24:56:5d:be:7e:90:5d:f0:92:92:4f:0b:57:b6:f4:f1:
2c:17:f8:e9:78:7e:ae:0b:70:6f:6a:73:8f:8f:c9:b4:3f:34:
2b:ea:7c:1b:ed:47:22:3d:d1:da:84:01:4b:f4:95:81:87:d2:
a1:51:e5:1c:5a:37:4d:76:2d:90:1c:c0:ea:73:4f:9a:3c:42:
91:41:ca:47:c7:17:63:04:a4:1f:2b:41:0a:75:63:6a:96:46:
74:cd:0c:40:b5:26:19:db:ac:d8:59:46:56:36:bf:62:78:de:
3a:61:dd:d3:08:a9:7f:d9:b9:a0:27:36:1b:89:34:6c:23:45:
e6:d9:f0:c3:80:49:51:12:7e:cb:63:89:8e:45:a2:7b:c1:3d:
f0:19:ce:fd:0d:24:82:83:e8:8e:01:a8:8b:f6:58:b1:b7:e9:
5f:48:de:f7:81:fe:73:d4:c8:ec:ac:4e:07:09:6b:04:c9:71:
b3:eb:9a:8a:b5:09:b5:13:a3:1b:73:52:98:35:67:bc:92:04:
f1:40:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:57:10 2025 by rpki-client