Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: ymhZp2yQxDeOIu7g4K2JAedzKi42UJ40MaE1FJwwKtw=
Subject key identifier: BF:D2:B3:8F:DB:A9:EA:3F:82:BC:F6:30:15:46:93:26:7D:C0:0B:78
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019763CCB37742B393352E079A86833913D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1593
Signing time: Thu 12 Jun 2025 11:00:49 +0000
Manifest this update: Thu 12 Jun 2025 11:00:49 +0000
Manifest next update: Fri 13 Jun 2025 11:00:49 +0000
Files and hashes: 1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: npjxUjZtm+qA0/2vLzmJQlO/f6TM33/LNP/ZayG4nnI=)
7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:b3:77:42:b3:93:35:2e:07:9a:86:83:39:13:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jun 12 11:00:49 2025 GMT
Not After : Jun 13 11:00:49 2025 GMT
Subject: CN=bfd2b38fdba9ea3f82bcf630154693267dc00b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:be:97:ae:ae:57:90:fa:3b:1a:86:11:57:
dc:22:d6:cf:69:fd:cd:b8:db:65:66:71:0c:86:66:
00:51:4f:25:a0:d3:fd:06:8e:d9:30:76:12:ae:45:
f8:55:72:b3:52:32:e6:64:55:a3:81:80:c9:34:49:
90:b7:5d:92:80:9b:68:f1:c5:2d:5e:69:1c:02:6c:
0f:c3:94:53:f7:e1:eb:87:91:8f:59:9c:d3:03:82:
f6:80:4e:fb:52:28:3a:d7:1d:be:72:f2:b8:3d:e6:
26:9a:59:2e:b1:fb:6d:f0:2d:12:1e:0e:84:b8:bd:
e1:cf:ba:e3:82:64:4f:ed:80:8b:79:7b:3e:98:36:
37:9d:13:f1:23:6c:41:8f:b3:00:85:04:3d:59:21:
0f:a6:22:2c:2c:69:ab:70:21:63:96:dd:54:55:d0:
41:94:0b:2b:36:cc:8e:fe:03:3f:1c:5b:70:72:74:
fc:5c:b4:bf:ea:d4:6c:5f:e7:b8:2b:b1:63:78:5d:
32:00:fe:4c:b9:0d:54:91:6f:ba:38:92:87:84:a4:
a2:7e:ad:ca:68:29:8e:14:0c:d6:57:8c:a7:a7:84:
fa:ec:e4:45:d0:a4:aa:bc:2d:91:34:2e:6b:c1:74:
37:dd:6b:cc:6d:0e:96:04:03:5d:2e:35:b6:7d:4c:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:B3:8F:DB:A9:EA:3F:82:BC:F6:30:15:46:93:26:7D:C0:0B:78
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a8:32:e8:55:09:3e:30:61:09:31:35:53:ea:68:b4:85:cb:
8b:85:02:43:d6:eb:ae:8b:25:e0:1a:99:e9:bf:70:93:5d:5f:
86:aa:df:b9:5b:70:50:19:2a:3d:3b:41:21:0d:25:8e:e8:35:
45:d6:0c:fd:70:9b:bd:d1:64:eb:61:30:32:db:1e:a3:e3:74:
5b:17:f5:f6:e7:2d:f4:a2:7d:e0:9e:36:cf:00:a8:80:01:6e:
2b:2d:28:3f:7f:98:ec:af:e3:74:cb:0f:dc:e8:7b:9f:d0:27:
1e:3f:1e:9d:48:8e:aa:a6:cb:24:31:f8:62:f7:07:a5:d7:c9:
20:07:87:a9:61:ea:a8:5f:a3:25:9a:e4:47:eb:1a:18:82:f8:
0b:a6:0b:4b:5d:98:55:09:e0:14:b8:59:fc:e1:7e:4e:a9:16:
53:0d:4b:00:44:90:a3:55:03:b7:f7:50:de:92:52:48:94:94:
bf:57:47:c5:71:65:9a:6e:25:c5:84:15:2f:de:63:ba:75:9e:
d6:31:a4:f1:e0:95:8d:2e:ca:42:af:dd:63:78:17:37:0b:dd:
0f:90:c5:ef:39:99:36:03:d4:11:09:77:3e:b8:7f:27:de:96:
ef:1a:fc:6c:d5:b9:91:87:bb:2c:9a:e3:1b:86:f4:4f:8c:d3:
d9:d8:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:18:34 2025 by rpki-client