Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: bfVcGAXv2R0gC3vBSQu0O18UgyqMXrfLWD0CkCswz4I=
Subject key identifier: AA:5D:28:83:DF:AB:42:4D:39:44:44:2E:B6:42:48:2C:D7:B2:50:AD
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 01974DB2A4DD31F5DEE1B3FCA85C89540FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0DEF
Signing time: Sun 08 Jun 2025 04:00:42 +0000
Manifest this update: Sun 08 Jun 2025 04:00:42 +0000
Manifest next update: Mon 09 Jun 2025 04:00:42 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: bdIjyScRNJF6FTqujLlhAaKfY5joAYiYyjgU0vTodJQ=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a4:dd:31:f5:de:e1:b3:fc:a8:5c:89:54:0f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Jun 8 04:00:42 2025 GMT
Not After : Jun 9 04:00:42 2025 GMT
Subject: CN=aa5d2883dfab424d3944442eb642482cd7b250ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:68:03:cf:a7:a2:e9:da:b6:42:72:a4:24:
98:6c:ed:7d:6e:fb:f5:c2:6c:66:ed:6d:9d:37:48:
57:c4:b3:8f:91:47:cd:c3:50:81:50:b1:b2:34:09:
23:8f:99:3b:a4:80:8e:14:79:56:33:1b:6f:11:b7:
4d:81:67:b3:8e:87:9c:bf:3f:08:9f:52:06:c4:fc:
1e:5c:5c:7d:ec:8c:21:31:99:3f:e6:fb:68:e4:c2:
84:e5:8d:ad:91:02:ef:d6:fa:c5:ae:6b:c8:d5:43:
c5:a9:f5:da:11:38:9f:07:fc:f4:d8:6f:20:d0:08:
29:31:a1:51:17:47:84:be:7e:9a:ce:b1:e6:02:82:
f2:74:26:f0:23:49:8b:72:be:52:af:42:40:62:2c:
4f:3f:d2:3b:c4:61:2e:b4:3e:81:65:81:c6:40:27:
6c:84:ac:6e:67:14:d3:7e:d7:55:9a:8d:2e:5a:ff:
dc:cb:c0:8b:17:19:30:eb:2f:dc:3b:a3:24:73:d3:
ad:4d:8b:73:bd:a0:4b:c2:19:a7:a9:59:3e:50:e2:
0b:fd:7e:9e:a1:80:71:0a:bb:05:9b:dc:41:ba:b1:
19:50:27:68:48:ba:7f:78:bf:7a:cf:6e:83:79:63:
a1:5c:5f:98:df:96:9d:14:d6:6e:b0:dd:48:32:31:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:28:83:DF:AB:42:4D:39:44:44:2E:B6:42:48:2C:D7:B2:50:AD
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cd:12:ef:f7:d2:71:05:df:be:00:76:ff:41:c7:e9:11:e8:
0d:93:9e:03:92:e8:81:76:dd:6b:ad:f8:14:75:94:3d:5c:15:
f7:50:44:c5:70:3c:e0:67:45:06:11:6b:e3:e7:c2:b7:cc:2c:
e8:41:f6:65:10:1d:43:07:39:9d:96:f3:5c:22:67:c4:ea:63:
69:05:f7:b2:09:06:10:41:7d:03:33:4f:5c:75:62:b3:7e:fc:
66:2c:a5:c2:f8:c7:76:0a:23:96:b4:a4:51:73:57:fa:8d:b6:
35:77:09:e8:8b:66:84:6c:fc:09:e2:14:0c:3b:c8:94:91:1d:
26:a1:73:d6:fb:3e:05:f6:18:04:b3:d9:de:15:de:f1:77:45:
a7:f7:73:08:c3:e6:e0:b7:20:3a:e5:67:d0:b8:e7:8d:18:18:
25:cd:e8:e2:61:f8:6f:f9:10:4e:5c:7a:c9:48:ed:55:85:0e:
06:31:c8:d2:b8:32:5e:1b:01:55:ec:c0:06:f0:cb:3d:ee:58:
78:50:a5:42:df:e4:7b:dd:ed:35:4c:71:83:db:bf:a1:25:5b:
4c:27:5e:5d:02:c2:3b:a7:39:08:0f:07:7b:12:cf:93:87:c5:
d5:34:07:9d:6a:5e:50:21:b2:d6:90:0d:c8:ea:33:b9:7e:36:
93:24:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:47 2025 by rpki-client