Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: AvKN/smL9OhhtfNiB5lp9pyol6uMmgm+wJIFAM7xqt4=
Subject key identifier: 78:3F:B9:9D:36:F9:BD:A5:C3:D8:8C:57:4D:32:36:D8:C0:D5:61:30
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 019749310C9C844AD23E676E3FC4D311547C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:00:40 +0000
Manifest this update: Sat 07 Jun 2025 07:00:40 +0000
Manifest next update: Sun 08 Jun 2025 07:00:40 +0000
Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: txul3fczfVEhy+E0KkUv0vAGL24IxCyrGZ8VLFJpbg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:0c:9c:84:4a:d2:3e:67:6e:3f:c4:d3:11:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Jun 7 07:00:40 2025 GMT
Not After : Jun 8 07:00:40 2025 GMT
Subject: CN=783fb99d36f9bda5c3d88c574d3236d8c0d56130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:80:fd:5b:fc:d8:a2:61:44:6f:48:52:03:
cc:ab:a7:d1:36:c4:db:e3:61:a0:26:38:a4:e7:db:
37:26:bf:4f:2e:2c:be:a7:2e:e4:5a:5b:8a:68:52:
d9:f2:a8:1d:26:62:7d:00:ad:d2:42:ce:9c:47:b6:
93:12:2c:69:45:b1:07:89:59:f7:bf:49:17:3b:3d:
e5:a7:4b:a3:5b:c6:e7:c1:65:e1:4e:e2:fe:8d:13:
38:c0:36:a5:40:16:4a:69:d1:a6:bb:74:9f:6a:3e:
6f:e2:ce:96:45:e8:39:6c:15:90:d3:7b:71:45:e3:
72:bc:5b:8f:2a:8c:2c:7e:8f:10:b5:cb:98:a8:7e:
dd:86:c6:12:b9:df:7e:98:41:ac:6b:e1:5e:55:d5:
93:ab:99:98:ab:ad:9e:e5:e5:f2:82:5e:70:93:43:
1e:f9:d4:87:87:33:7c:17:56:ec:45:89:a2:34:8c:
6e:23:91:bd:5f:c8:2b:1c:af:b6:d5:fc:c7:df:cc:
f5:87:24:07:47:4f:73:07:24:fb:0d:f8:62:14:c3:
ab:76:a0:58:8e:aa:83:f3:fa:89:b5:17:00:8b:48:
29:4b:ad:c8:18:eb:57:c8:ef:48:d5:20:09:b2:99:
6c:04:9e:36:33:a5:5b:7b:f3:93:a4:fa:ef:c8:d3:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:B9:9D:36:F9:BD:A5:C3:D8:8C:57:4D:32:36:D8:C0:D5:61:30
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:2a:a9:c7:06:95:1e:2a:55:5e:ac:e1:6d:83:72:36:f9:
09:b4:3e:ed:7a:3a:5c:a4:ff:31:fb:eb:2b:30:3a:24:0d:ed:
b3:8c:40:e5:41:82:2a:4b:c1:90:3f:56:21:56:2d:8c:41:4d:
4d:97:47:df:f4:23:d0:cd:09:91:8b:11:79:f0:cc:7c:af:03:
eb:2f:ed:f3:9e:4f:0a:11:77:f5:e3:e7:f1:a3:2d:8a:f7:e6:
18:0a:00:ca:1f:b4:3a:5f:9d:90:93:c3:b5:19:56:ba:90:bd:
89:71:2a:5d:c6:3f:fe:99:43:71:96:ae:ce:81:4c:c7:f0:57:
c9:92:2f:5a:58:ac:f0:6b:c7:7f:6b:b9:1e:7e:f8:d7:0a:c2:
5f:86:28:68:48:53:df:e1:af:1a:f9:a1:48:d7:8b:db:93:a1:
43:8d:c3:b6:03:4f:f0:69:4e:d9:77:c9:6e:6b:ca:30:6b:cd:
48:94:23:c1:84:6a:fe:d6:65:a6:7c:a7:93:f3:f1:ed:92:03:
b2:60:10:54:63:61:56:41:cc:0e:69:81:21:f8:33:b4:74:ee:
51:5a:22:a4:29:2c:a5:ff:91:ef:2c:a1:bc:dd:18:64:cd:bf:
80:d5:a4:05:a8:dd:c8:d0:ed:5c:ca:00:ed:47:12:54:83:d5:
ea:af:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:01 2025 by rpki-client