
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: qJGsaw0eeyPcKyCKjokWRAEk1UUgQ6mefCHJNC0kc2w=
Subject key identifier: F1:B5:F6:DF:A8:41:EC:F8:41:51:1B:AC:C8:27:60:00:D5:9B:58:32
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 01976B4FFF9A1A2C9A02B8A34839B08A30B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 22:01:34 +0000
Manifest this update: Fri 13 Jun 2025 22:01:34 +0000
Manifest next update: Sat 14 Jun 2025 22:01:34 +0000
Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: G1jU2cVvfNcyVu887v1D1JYzhlPMpWk5A5PsaOslTeE=)
2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:ff:9a:1a:2c:9a:02:b8:a3:48:39:b0:8a:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Jun 13 22:01:34 2025 GMT
Not After : Jun 14 22:01:34 2025 GMT
Subject: CN=f1b5f6dfa841ecf841511bacc8276000d59b5832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:68:61:78:9b:2b:28:5a:d7:f1:9c:65:83:
e1:89:31:29:af:93:ae:7d:b6:0d:fe:67:a0:3e:99:
6c:1d:e3:1c:19:6f:4f:af:bd:1c:f0:3e:f3:35:8f:
f0:75:0a:e2:06:1d:b4:2f:35:74:cb:12:22:84:0c:
4e:82:12:a7:f7:96:4f:e2:93:8a:80:eb:0b:f4:4c:
38:c5:51:dd:42:db:96:9e:bf:cb:03:e5:c1:ad:42:
78:19:cf:29:38:b2:eb:c2:a5:21:5a:c8:7b:e3:dc:
a5:89:d7:01:6b:35:22:65:04:af:a0:a0:08:36:57:
38:05:6c:27:df:0f:7a:87:77:f4:53:06:09:ab:c1:
2b:3f:fc:37:5f:b6:62:4f:52:38:6b:2d:9b:06:f8:
a6:f9:38:3a:50:7c:5a:f5:33:b7:a0:b2:f6:03:b2:
87:26:db:b0:64:dc:e7:46:b6:f3:07:85:88:f3:27:
d0:e8:f6:4b:63:5e:1e:76:50:58:da:9e:4c:79:7a:
40:4d:09:de:d5:08:f9:e8:64:00:fd:9f:1b:c0:03:
a9:6b:55:ff:7c:46:41:3e:f3:d1:84:87:04:96:ee:
1e:c1:d3:a5:b2:00:8a:0a:25:94:5d:9d:40:91:06:
9e:cd:da:19:43:a0:2e:c2:a9:22:0e:96:ce:df:69:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:F6:DF:A8:41:EC:F8:41:51:1B:AC:C8:27:60:00:D5:9B:58:32
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:0d:ba:3e:98:d7:01:8c:b5:b9:34:92:0e:59:1f:2f:01:
04:9d:55:be:32:8c:8f:37:9d:25:c6:2e:91:6b:db:60:fd:50:
fc:90:6d:92:30:8e:4c:49:2b:9a:6c:c8:1e:61:c8:31:35:4d:
8c:36:03:49:a8:7b:41:25:f6:0f:36:f2:d0:a5:f9:16:b5:cb:
90:9b:6c:60:9a:56:96:13:a5:7b:a5:09:6a:f7:c5:08:74:cd:
3f:30:db:31:2e:9a:f7:0a:13:90:4f:dd:56:6f:58:51:74:c0:
df:da:a2:47:35:90:d2:1b:f3:fe:5f:19:59:4f:c8:4e:41:bf:
d5:43:db:ed:c0:bd:ac:2b:eb:c0:e9:f4:37:2a:79:76:c0:ee:
e7:60:bb:4a:a1:d1:4b:18:b3:39:2a:ca:f6:4b:7a:44:46:f8:
4b:6e:78:0c:3d:ba:07:89:e3:a3:9b:11:f4:9b:e6:2f:9f:a1:
a0:2c:76:ec:ba:b0:ae:bf:8c:2c:73:43:f9:d8:7e:3a:48:ea:
2d:40:89:56:93:d9:19:ea:b2:e8:3f:54:49:a2:5f:fa:98:87:
c0:46:25:33:f9:7c:cf:57:ca:bb:c6:f1:05:ff:16:f8:61:7a:
2f:be:b6:ff:7e:34:93:47:38:69:a6:80:6d:ab:cc:98:f3:c3:
19:e6:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:20 2025 by rpki-client