Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: A0lUbZGinvrdl15GtPkTSXKAAjcOCnJ+mbYxRzUAfb0=
Subject key identifier: 30:31:F7:BB:7F:BE:32:87:06:6C:4C:4D:D0:C4:D5:FD:AC:4A:F1:0F
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01974B1F2BD4DD2EA1B2A830F6D8EF847DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 16:00:23 +0000
Manifest this update: Sat 07 Jun 2025 16:00:23 +0000
Manifest next update: Sun 08 Jun 2025 16:00:23 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: FRrW1hreuyK0pza25iXbh2K0NOowSOK8o5yLVAgYcIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:2b:d4:dd:2e:a1:b2:a8:30:f6:d8:ef:84:7d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jun 7 16:00:23 2025 GMT
Not After : Jun 8 16:00:23 2025 GMT
Subject: CN=3031f7bb7fbe3287066c4c4dd0c4d5fdac4af10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:5b:6c:86:f2:d6:e9:53:15:13:7f:66:aa:
88:55:85:69:b9:51:8e:4f:71:7b:ca:3a:7d:57:47:
12:4c:5a:cf:86:93:a0:44:f7:2d:c0:13:65:51:7c:
21:a3:37:17:11:03:36:9c:7f:12:56:4c:c8:32:1f:
59:5b:aa:01:6a:41:4e:1d:bf:8e:7f:32:cf:b2:97:
d7:9f:24:8b:c4:ef:6e:b1:f1:e4:9e:7b:80:bc:73:
4e:19:1f:ea:a7:ad:5a:1b:de:21:ce:45:8b:bb:6e:
b8:5d:f5:48:de:4f:4c:43:b9:8d:c2:b8:c0:3e:a3:
88:22:fa:d5:da:f4:01:88:b7:ab:18:01:1b:10:1b:
a9:6b:fa:16:c9:09:a7:86:ca:04:04:ea:1a:6b:af:
30:56:38:a2:ca:cb:30:6f:d8:60:4a:56:45:12:5b:
4a:cb:81:de:64:79:2f:f1:4d:37:d5:25:62:0d:1e:
30:f8:41:38:b4:55:5e:b5:4e:88:ec:ec:45:ff:ed:
cc:a2:64:ca:db:8a:64:16:88:58:a5:97:b5:a3:1a:
e1:06:6e:0b:68:e4:95:c0:fc:0e:3c:be:67:2a:e5:
92:bc:3d:d3:54:b5:b4:93:3f:42:e7:90:78:e9:9e:
e3:25:2b:d3:80:c2:9c:98:2d:77:f5:1d:8b:92:40:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:31:F7:BB:7F:BE:32:87:06:6C:4C:4D:D0:C4:D5:FD:AC:4A:F1:0F
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:a9:7a:90:d5:d8:6a:9c:80:d2:21:b4:dc:e1:c5:4b:be:
6c:76:d8:b4:05:9b:71:4a:a9:0e:27:4d:7b:43:e7:05:27:89:
72:c1:04:af:56:18:e1:b2:b6:a1:88:32:6b:38:1f:93:f2:96:
b4:a9:42:a5:43:b2:f2:f4:80:a4:a8:d6:db:84:e7:93:b6:5c:
6a:0a:6c:af:e5:89:6f:08:10:6d:ad:1e:0c:19:74:c6:e7:cb:
b7:9f:f0:9a:44:e7:65:9d:f9:44:3a:99:c2:b1:0a:df:14:0a:
fc:1a:9f:f7:17:0b:f5:b6:45:78:c6:42:63:94:7a:75:7d:c1:
30:59:8b:e7:9e:0b:df:36:c6:04:c8:d2:6e:12:64:a7:97:89:
32:51:7f:44:93:03:1a:ea:d1:0d:ad:fb:bd:94:f9:d6:65:82:
92:e8:c0:42:12:3d:5c:b8:aa:41:28:28:05:2c:ea:42:5d:a5:
a6:a4:8e:e7:8d:58:83:65:f6:6d:56:e1:bf:79:4a:34:de:80:
4c:8a:1a:a1:d3:39:18:d0:14:9f:4c:4d:f7:0b:51:f3:cd:38:
9c:1a:36:4f:91:7d:71:4a:5e:32:8c:7c:bd:5a:05:86:dd:ce:
1e:b5:80:cd:ba:c9:9c:a8:b2:9b:d7:53:c8:87:57:ee:66:54:
57:e3:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:19 2025 by rpki-client