Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: wvOKY0Wc9lAgF/279tRYUG+nVhR64xUwVoiQEkDoa8A=
Subject key identifier: DB:F5:BF:F9:65:90:7C:E9:F5:37:93:3A:8B:DB:66:AB:F4:52:DB:20
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019758368008D0F77E039307F406252EB4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 05:00:56 +0000
Manifest this update: Tue 10 Jun 2025 05:00:56 +0000
Manifest next update: Wed 11 Jun 2025 05:00:56 +0000
Files and hashes: 1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: 2WIcwJbxEll7JcpqgQQcjzPNz2yerVa5XIqEEk84uqQ=)
7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:80:08:d0:f7:7e:03:93:07:f4:06:25:2e:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jun 10 05:00:56 2025 GMT
Not After : Jun 11 05:00:56 2025 GMT
Subject: CN=dbf5bff965907ce9f537933a8bdb66abf452db20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:94:ec:2b:9f:40:aa:45:71:83:06:bb:da:
78:38:fc:b4:7b:b6:98:a3:4f:40:b3:9f:35:e9:f8:
5f:1f:d0:40:16:b1:bc:56:91:65:2b:98:ea:74:a6:
77:92:51:6a:b0:b5:97:c6:4c:c6:38:0d:fd:58:2e:
c4:f4:7f:ba:0e:e9:b9:60:af:19:03:29:4c:fc:b2:
43:01:83:da:b3:ad:0d:dc:b2:14:77:66:ad:84:55:
9a:6e:76:1f:16:8b:b3:e8:27:3e:b8:cd:51:08:97:
52:3a:f2:da:b4:39:50:e5:1c:97:1e:7a:40:62:93:
79:b2:92:e5:e9:03:c0:57:3c:9a:83:5f:06:cf:dd:
f8:8c:1a:f7:b6:71:35:07:19:d0:b5:8a:46:38:06:
56:bf:d0:96:b3:2a:72:6b:69:6b:35:fe:d2:35:6a:
c5:3d:b3:18:e8:2f:fa:fd:0a:ff:ed:f0:52:fe:a7:
1c:d8:dd:6c:92:31:cf:57:36:b7:aa:88:13:27:d0:
b0:85:64:19:6e:bb:54:27:72:ec:e4:4e:29:46:0f:
35:e3:f4:e8:3d:f9:b5:17:a2:a8:8a:bd:78:79:6d:
07:25:da:93:23:bb:34:98:57:2a:3d:5b:f1:ce:67:
a0:7b:56:d0:8c:5a:34:e5:a2:14:ad:b6:e1:ab:a4:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F5:BF:F9:65:90:7C:E9:F5:37:93:3A:8B:DB:66:AB:F4:52:DB:20
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3d:84:c2:d3:b3:67:e2:7e:59:70:0e:be:9a:cd:2a:75:b1:
e4:66:3c:7b:64:9f:7d:23:95:3f:ee:7f:b4:cb:20:32:76:10:
c0:58:b2:f9:37:7b:06:0e:bf:59:e9:80:35:1d:72:c0:d7:a4:
c7:fd:3e:20:c1:9b:54:ec:df:50:a6:b5:0c:dc:58:b3:4f:13:
cf:66:52:07:de:3d:b0:5a:00:d7:75:2b:51:09:c9:a0:81:af:
65:66:be:7e:e6:1e:16:65:a2:78:34:82:0f:b4:92:ee:37:91:
4f:f0:97:e5:9c:b0:29:59:1c:de:7b:ff:58:1c:e3:58:78:07:
12:b4:69:19:33:8a:16:df:1b:8c:28:9a:56:4e:86:2b:e1:1f:
60:d5:54:e0:d5:bf:5a:7e:81:ad:7e:e0:80:2c:8b:48:52:05:
e5:d1:d6:06:1d:11:af:fd:78:a0:77:bd:1b:15:71:dc:53:e0:
72:2a:c8:80:9f:85:8a:f7:c0:76:3d:f0:82:e1:b7:de:e6:c6:
ed:70:27:36:8d:f9:37:6a:91:02:0f:0e:42:32:a9:c1:8b:f0:
87:31:cc:ba:ce:aa:b5:e3:5d:3b:85:17:5c:68:f1:54:19:e8:
bc:1f:1c:67:1c:a0:a5:20:68:30:f4:ee:79:27:31:10:4c:1d:
95:f8:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:02:13 2025 by rpki-client