Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: WwCTczwKOpyAf6k5Qeb+RS+D1fcez1sAFWGbzMgPiX4=
Subject key identifier: 91:2A:DC:2D:9F:CB:FF:11:9D:CD:00:52:1A:96:7F:ED:2F:DA:49:3D
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 01974A4371FAAE28430DF79B1DCDEDBDDE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: 8PhfJF0Xk7OgO1M+PLYZ/KXEke+0S1Uw6ztcQSdbLls=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:71:fa:ae:28:43:0d:f7:9b:1d:cd:ed:bd:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=912adc2d9fcbff119dcd00521a967fed2fda493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:22:71:3b:ca:39:84:5e:0d:9f:ee:4f:67:
49:4a:7e:fc:b1:f6:7a:19:b8:43:6a:db:68:2e:4d:
de:c7:f9:ed:f9:e6:5a:ca:80:42:4e:bf:72:d5:da:
28:33:6f:03:1a:5b:bb:a4:ba:42:6d:fa:7e:11:8a:
49:85:f8:f0:e4:f1:85:a1:b6:45:8e:2f:2a:77:76:
c6:0e:5a:ad:5d:ab:7a:8e:69:4a:4c:a6:73:91:6f:
2d:ac:b8:de:0c:1c:b5:b9:20:7d:e5:3f:93:be:7c:
c4:cf:cc:c5:d1:fe:b8:4b:4f:de:82:a9:f8:72:d7:
76:3f:79:83:49:5b:a7:ee:e7:c1:ed:f0:37:1f:fb:
1f:cd:fe:b9:1b:d2:a4:03:56:3f:d2:7f:2b:92:cb:
da:41:d7:1c:a7:f3:69:89:9d:67:29:10:76:f2:19:
23:bb:bb:5c:9a:37:3e:8c:73:ac:de:b8:b0:25:3e:
52:9d:ee:fd:f9:fc:55:f3:67:80:99:05:7f:69:f3:
1f:e3:71:62:a2:54:d5:f8:d4:09:b6:df:12:29:64:
16:0a:cc:a0:70:29:51:84:14:33:ea:85:dc:ee:d2:
8b:87:9a:4b:44:ed:d1:4c:2f:6d:ab:86:77:e7:5e:
9a:81:37:5c:3e:d1:ad:96:60:21:f0:3b:0e:71:2c:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:DC:2D:9F:CB:FF:11:9D:CD:00:52:1A:96:7F:ED:2F:DA:49:3D
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:97:ea:b6:36:fb:2d:22:bd:cd:ad:50:f5:ed:4e:36:d3:
d3:73:ff:7c:dc:22:f4:23:1d:70:66:a5:08:9d:2d:8e:99:ad:
68:a1:54:99:43:70:4c:b3:91:22:a5:fa:7b:2e:02:2d:76:93:
25:44:44:b3:b8:27:d2:a1:8b:70:fb:66:86:85:d8:dd:8e:98:
57:d0:30:5f:70:84:e4:06:57:18:93:69:9b:62:5d:3a:db:cc:
ae:1e:b4:0c:5e:56:16:e6:84:6b:d1:ab:dd:ae:03:d2:dc:65:
d2:05:26:64:ac:a6:6a:12:6e:86:05:ea:a8:43:3f:6b:03:8a:
48:cd:1d:5f:a9:4d:e8:34:70:97:71:b6:5a:0f:77:b0:cb:ce:
b3:bb:f1:4e:8d:94:7f:5c:a9:4a:75:c2:17:2b:c1:b9:f5:8a:
b6:82:35:ce:9f:fc:10:15:21:f5:71:3a:f6:a1:19:2b:5e:5e:
70:26:c9:28:a3:91:bb:c1:42:b5:08:0f:06:82:cf:e1:21:4c:
99:a6:25:4c:45:94:ba:31:71:cc:f1:64:e8:d8:a5:ad:52:6f:
3a:12:89:29:fc:6b:86:d1:5a:07:7c:17:d3:ff:e4:6d:58:3a:
ac:bd:1e:03:f7:4c:ad:bd:58:7b:fd:ec:10:52:d2:13:77:da:
6f:9a:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:59 2025 by rpki-client