Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: NuVITb1A/w/qBYzkQ0g0gLhyh5YwJElDAYlBM+15buk=
Subject key identifier: DE:D1:B6:C3:93:E9:5F:F4:B4:9B:14:3D:DD:75:15:FC:03:CE:E3:21
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 019749315E30C73764847A31557B601ECA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:01:01 +0000
Manifest this update: Sat 07 Jun 2025 07:01:01 +0000
Manifest next update: Sun 08 Jun 2025 07:01:01 +0000
Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: qOZq379xVIQOGpb89N0iMuD1nh2O2OMqEWd5dfp4VYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:5e:30:c7:37:64:84:7a:31:55:7b:60:1e:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Jun 7 07:01:01 2025 GMT
Not After : Jun 8 07:01:01 2025 GMT
Subject: CN=ded1b6c393e95ff4b49b143ddd7515fc03cee321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:af:f8:95:26:d8:b4:f0:57:4b:78:b6:cd:
a3:61:b2:91:1c:a0:d9:45:37:34:63:72:e6:09:4f:
13:1b:91:fa:b7:50:65:00:a9:94:c0:10:e6:86:c2:
90:48:61:95:73:dd:a8:17:07:33:99:4a:60:cd:72:
c6:b3:b5:c3:1a:2c:b5:98:ee:63:f1:b7:16:45:08:
65:3c:4e:db:80:48:26:04:0d:a2:72:55:8b:62:e8:
b3:d4:a2:13:71:73:15:1b:2d:78:fd:4d:67:ee:f0:
b7:ea:48:41:a2:db:03:ef:e5:11:37:73:ff:ca:44:
44:32:b0:15:b5:61:5f:5a:d3:70:23:36:eb:45:6b:
07:15:c3:1b:22:bb:8b:9f:0a:82:7a:1a:d3:f8:39:
6b:da:91:f7:2a:d4:ab:1a:42:b5:0a:23:4b:ff:e0:
5a:d4:30:aa:de:c0:1c:4c:c0:73:d1:57:5c:76:cb:
48:bc:67:03:53:d9:3c:4e:7b:c3:97:a6:35:cb:2f:
7f:89:88:58:4b:55:f8:52:67:92:3e:9a:6f:aa:a0:
fc:05:cb:1d:33:86:f9:f7:b1:e5:09:03:ab:82:1a:
40:13:1e:74:e1:cf:45:73:94:92:79:44:7f:57:d7:
f1:60:c9:60:7b:23:8e:fb:75:ee:75:dc:af:a7:90:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:B6:C3:93:E9:5F:F4:B4:9B:14:3D:DD:75:15:FC:03:CE:E3:21
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:96:f3:13:ef:58:4c:92:77:ff:38:e4:45:27:c8:32:bf:
66:97:e7:9c:4c:17:2b:26:98:2a:2c:9f:77:a3:4d:e4:f3:4f:
4c:5d:5a:86:42:27:b7:f4:e9:ff:96:60:3f:fe:99:50:ea:f6:
c7:1e:19:92:a6:94:de:1b:30:b7:d3:9e:42:9e:ea:2b:fa:1e:
90:59:c2:65:27:af:9b:07:22:10:fc:b7:98:3b:ba:45:df:eb:
b4:0f:48:a6:1e:cd:4b:fd:32:9c:d1:fd:f3:73:0b:69:1b:c0:
c4:28:fc:b3:d9:21:81:3b:c3:65:d9:f9:6d:78:24:cb:4c:30:
45:e2:02:10:5f:2f:86:8b:87:3d:ef:56:d6:51:de:be:9d:20:
6f:75:57:1b:54:84:8f:0d:35:76:79:92:90:75:23:b6:c7:0a:
5a:2d:5b:cc:6e:7d:f0:34:5a:47:8e:33:a4:f3:da:e9:b7:40:
f2:df:8b:05:5d:af:13:ee:0b:5c:ee:4e:54:f1:d6:b8:07:25:
c5:af:56:e3:05:3a:ba:79:41:a5:b8:42:e6:aa:11:df:03:f9:
31:df:a0:92:29:d9:70:64:7a:27:ee:7e:ba:d1:ed:74:8a:24:
41:64:11:e4:47:f6:b7:c4:00:80:0c:e6:81:ab:36:f7:35:a9:
68:9b:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:23 2025 by rpki-client