Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: yakxDwwk+LT6LiY5K0PGGeIlGf/VCOE4bVf7G1R/JKo=
Subject key identifier: 14:F3:CB:53:67:E4:71:8F:DA:CC:A9:2C:F9:1D:32:FB:9C:CF:2F:45
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 0197469DA9368D32F6EAE41D6B9D23EE7AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0C26
Signing time: Fri 06 Jun 2025 19:00:26 +0000
Manifest this update: Fri 06 Jun 2025 19:00:26 +0000
Manifest next update: Sat 07 Jun 2025 19:00:26 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: gBYJqDAQ/m2O1INNMAEk+46al2WEW/ABG7PyV8DNfAs=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:a9:36:8d:32:f6:ea:e4:1d:6b:9d:23:ee:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Jun 6 19:00:26 2025 GMT
Not After : Jun 7 19:00:26 2025 GMT
Subject: CN=14f3cb5367e4718fdacca92cf91d32fb9ccf2f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:27:68:f9:c2:9b:21:c6:20:50:c6:e0:5e:
f7:fc:22:c4:43:ed:0e:23:3a:06:aa:a5:5f:87:8b:
88:ee:97:d4:8b:a2:07:4b:55:0c:42:2b:0b:a1:a3:
9c:c2:2e:d7:8e:19:e5:29:96:9e:ac:30:41:5a:60:
8c:e9:68:fc:25:01:b1:2e:68:cd:6d:e5:85:20:fd:
8b:97:5c:ae:16:dc:37:87:93:96:f0:97:12:8a:8d:
8b:bd:e7:be:62:91:ff:41:f3:25:a2:2d:50:2f:6c:
71:89:65:63:da:2c:3f:b7:f4:44:71:db:24:1f:34:
13:5b:a2:2b:94:82:0a:1c:cd:29:0c:24:a9:23:72:
99:b6:77:d2:c1:26:cb:55:3c:ad:3d:ac:6c:10:55:
2e:ee:fe:78:df:e1:d8:0f:09:1b:74:e8:89:eb:30:
1c:17:65:2a:a7:c0:f6:92:16:ca:f5:41:35:8d:b6:
45:3f:54:f4:2b:ec:79:f5:67:40:08:36:5a:c2:a2:
58:3b:9e:86:8f:7c:e0:f5:62:ab:66:c2:1d:36:01:
1c:ae:c3:8e:24:f6:e1:4b:67:d1:18:eb:cd:4c:17:
24:3f:49:4c:53:d0:c3:38:c8:c5:eb:56:0e:32:e6:
51:de:8d:63:93:f8:71:05:68:f3:4c:ee:ce:74:2c:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:CB:53:67:E4:71:8F:DA:CC:A9:2C:F9:1D:32:FB:9C:CF:2F:45
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:31:49:0a:63:f9:f9:43:31:82:5b:78:e5:67:31:bb:28:7c:
35:ce:a2:a1:a1:0f:71:f3:de:34:9c:4a:5b:b7:bc:40:3c:2f:
2b:84:61:a0:60:74:34:6e:6b:a2:a4:99:f3:3f:c7:05:25:7d:
e2:01:4e:04:eb:88:af:71:cb:cd:6f:18:5f:76:59:c8:ca:57:
04:d4:6a:53:3d:8e:71:ad:53:d3:be:3d:f2:1a:1a:46:5d:55:
2e:87:ba:cf:db:93:2e:f6:2a:76:8a:96:03:1e:2d:46:7e:a3:
6d:0e:7c:a3:34:e3:02:e1:1b:44:2a:2c:7c:df:8e:6f:96:36:
0d:65:a1:73:ab:e4:3c:a2:46:33:5a:75:d5:cb:29:38:25:42:
b0:1c:09:85:18:f1:0e:42:ce:7a:4e:26:e8:fe:bd:f3:83:d6:
6d:f6:fb:0a:c4:7d:8e:32:83:f2:32:e3:08:28:f0:0e:3e:13:
66:f5:99:9c:2b:f5:9f:f3:ec:02:a4:83:55:a5:f9:b7:3e:2d:
db:4e:47:db:25:9f:0d:66:0b:ee:b0:c9:68:84:7f:d7:35:31:
47:27:9e:5e:f0:a3:97:b9:b9:c1:ef:30:c3:47:71:f4:e4:82:
88:7d:4e:3d:15:44:1b:6e:ae:b9:e0:75:aa:8a:71:b8:29:b8:
47:55:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:55 2025 by rpki-client