Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: GVt39kkmrzRe8J0+jcLR/sxusmiNzIAUmbZ+ggy1rKI=
Subject key identifier: 11:4A:6C:C5:A1:EF:F6:AA:A9:68:4A:DC:5B:80:42:98:9B:7D:78:DA
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01974AE8E6BE98D76084B8EC6EA5525CE9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1320
Signing time: Sat 07 Jun 2025 15:01:06 +0000
Manifest this update: Sat 07 Jun 2025 15:01:06 +0000
Manifest next update: Sun 08 Jun 2025 15:01:06 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: DItragGuNX5AXFNiYOS08TrhaAU69dEs60YUprTW+0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e6:be:98:d7:60:84:b8:ec:6e:a5:52:5c:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 7 15:01:06 2025 GMT
Not After : Jun 8 15:01:06 2025 GMT
Subject: CN=114a6cc5a1eff6aaa9684adc5b8042989b7d78da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:6d:ce:3d:29:b6:14:11:2f:3b:08:5d:8a:
ac:30:5d:24:40:00:72:f7:ad:09:49:d5:6f:09:24:
00:ba:61:3a:56:72:f6:33:2a:3e:e1:e8:25:ac:c4:
a8:cd:c1:be:82:a5:46:0f:8b:97:bc:01:69:0f:b4:
f1:c8:dd:63:4c:c3:82:e4:55:1a:14:ab:a9:04:c3:
e6:fb:e2:b4:93:73:a1:3b:12:39:ac:53:6c:15:65:
36:76:64:27:6a:a3:9e:39:c0:66:45:e3:20:cc:b4:
c8:c1:78:63:00:61:c2:d7:0b:e4:f0:9a:d9:2e:05:
44:e5:e9:ec:e7:b3:90:29:7b:d2:25:a6:12:2f:d9:
82:11:ef:b7:5a:11:1f:8a:35:52:67:68:af:39:5f:
5c:13:c7:a1:56:c1:81:02:9e:0c:67:72:11:0b:4c:
77:6b:c0:27:fd:6a:ad:16:db:61:0d:0a:09:65:62:
38:90:2b:29:14:b3:6a:18:ef:4c:4d:66:b7:59:17:
b7:76:36:58:33:0c:78:60:67:7c:45:e6:4a:dd:8f:
33:62:e3:49:72:c9:2f:b7:be:ac:19:07:4c:ef:f2:
e3:d5:3c:31:00:e6:f7:01:8b:c0:35:98:43:83:32:
2d:15:57:45:62:e2:3c:4e:8a:c3:d3:7e:c7:50:eb:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:6C:C5:A1:EF:F6:AA:A9:68:4A:DC:5B:80:42:98:9B:7D:78:DA
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4d:09:d3:53:22:a0:61:2b:86:d5:b6:d6:95:7e:8c:0b:a1:
1b:17:fd:d0:58:d5:6c:e6:57:e5:18:d1:61:3d:79:26:b3:36:
5e:8a:53:90:d3:f0:62:55:2d:15:a8:d5:91:57:ce:ad:9d:59:
53:c1:54:43:4d:6d:58:e9:cb:be:44:b7:55:94:f7:be:81:42:
4d:ca:bb:d1:0d:87:2a:f6:5f:52:26:ec:b5:86:ab:6a:b0:bd:
65:5e:0a:14:8e:89:67:4a:a8:ce:84:c9:23:9d:4d:a0:16:c9:
04:2a:f9:ed:ad:e0:0d:63:e8:82:ab:6a:17:20:17:81:05:d3:
22:cf:da:41:0a:21:88:b6:62:b1:ed:d2:3a:46:d6:41:9e:e3:
89:4a:1e:df:42:3a:12:f3:16:32:99:b1:1e:40:01:f7:b2:a7:
6f:a3:3b:b4:13:bd:4f:35:6e:77:44:3f:1c:86:82:9f:7e:b0:
98:03:99:cb:c2:a4:e8:d3:f9:e1:b0:23:b1:09:01:6e:5a:ea:
ce:20:e6:01:74:47:4a:af:46:b6:73:2d:cf:41:78:da:7d:6c:
1d:2f:99:98:88:68:0d:c4:95:15:47:0a:4f:ba:e7:92:68:7d:
79:64:1b:d6:7a:f1:b6:b4:b7:a1:f6:49:11:47:3a:f6:82:4c:
38:3f:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:43 2025 by rpki-client