Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File: lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier: JGGB0fCh3xWNHnOWIVVBnv0VoYgOF25lN378nRoW2X8=
Subject key identifier: 04:EA:17:0A:36:9B:CB:DD:69:14:90:44:D1:CC:94:B0:F6:90:6B:1A
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 01974E5721307B8EDD6875D92FF2DB0760ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number: 14D6
Signing time: Sun 08 Jun 2025 07:00:22 +0000
Manifest this update: Sun 08 Jun 2025 07:00:22 +0000
Manifest next update: Mon 09 Jun 2025 07:00:22 +0000
Files and hashes: 1: V6dzQYTukirsU-gqtCUSWtxmwyw.roa (hash: TAhPxTUSZwI4JsrpdkkvjRG18+wELOBapOWsonm/zpw=)
2: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: oxERuxjuEG4PjohXOUXr7tJV51qKE1Ke+PzpQWLqoqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:21:30:7b:8e:dd:68:75:d9:2f:f2:db:07:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Jun 8 07:00:22 2025 GMT
Not After : Jun 9 07:00:22 2025 GMT
Subject: CN=04ea170a369bcbdd69149044d1cc94b0f6906b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:e7:38:08:f9:52:5f:54:5a:9d:b8:cb:5b:
7d:eb:c5:2b:55:50:e1:57:8d:82:84:e5:3d:de:00:
90:52:38:01:7c:4d:ad:3a:23:7b:cf:0c:cd:01:a7:
a7:93:5f:c2:b4:80:7b:ac:26:77:fa:46:00:c9:3b:
78:9c:c6:52:cd:92:6e:17:d6:0c:51:72:33:d9:fb:
a8:e9:57:54:64:32:6c:71:89:f2:50:99:c8:55:64:
09:45:bf:23:54:de:a3:72:c8:8e:e2:15:ac:af:86:
2f:74:10:6d:e1:c7:c6:9f:23:36:ab:c6:fa:6f:0c:
01:be:29:ef:59:05:ba:3f:da:e0:22:81:d8:e0:a1:
fa:cb:ad:60:43:8f:74:ff:18:f3:db:a9:4c:b2:10:
94:84:c0:e8:dc:e6:0d:1b:c5:09:67:29:80:c9:28:
ce:8f:ff:8e:29:80:0c:c2:66:30:6e:4b:5c:a4:37:
23:93:da:53:a1:25:d1:d7:85:2a:41:02:13:cb:ec:
84:4c:a0:6f:20:1b:b8:7d:b7:e9:e1:eb:69:74:30:
75:b2:c0:6f:28:01:f5:b6:67:09:0c:93:83:0b:d1:
1d:40:fe:65:39:81:98:d1:f4:f6:e6:d3:70:7a:0d:
e9:05:b1:46:78:ac:87:10:72:cf:3b:5e:28:7c:aa:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:17:0A:36:9B:CB:DD:69:14:90:44:D1:CC:94:B0:F6:90:6B:1A
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:ce:0a:86:a5:ac:47:1d:c3:7e:93:ac:72:3b:eb:4f:91:
ca:57:6c:64:ad:fe:3d:ac:04:11:77:9d:56:63:6e:26:af:08:
7c:93:ad:09:07:94:f9:fb:67:72:a3:c5:f2:8c:38:8f:84:1d:
75:9f:a3:61:5f:12:84:b8:b2:4b:ac:47:e4:80:f4:3c:37:4c:
13:98:8d:f6:df:4c:99:5f:48:ca:88:25:7c:19:b3:e4:1e:6d:
d6:4e:77:e3:c8:e9:4c:da:ac:e7:b1:39:b8:77:ac:92:eb:02:
97:dc:0f:24:08:ca:31:d1:92:2c:7e:d3:0d:09:9c:f0:75:47:
7d:7b:c1:c3:b7:d7:e9:31:d4:64:a4:e1:8b:7e:b8:21:28:8a:
1f:c7:d3:be:a2:46:f5:e0:26:88:db:57:c3:3c:fc:5c:52:e9:
25:b9:9c:4c:67:51:b1:70:5b:2e:28:f1:d9:62:7c:2d:0e:83:
d9:22:75:a9:f8:9b:72:dc:e5:0c:bf:1b:db:8e:dc:ef:cf:f8:
5b:e9:c4:eb:74:e6:74:72:66:0a:8b:67:04:00:68:99:ce:9a:
5b:52:38:c7:f2:1f:96:16:27:98:c2:3c:18:d3:63:d5:53:c3:
ad:dc:48:87:56:9c:b9:7c:60:f7:f5:50:06:22:86:0e:48:1c:
42:a7:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:07:30 2025 by rpki-client