Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: ZZakmr6z1AmFmDUFnp0PYLlwWU2kTnmFISEkWae0YHs=
Subject key identifier: B3:BC:29:12:41:BA:7D:B5:8D:6D:BC:4F:58:EA:9D:C4:7F:97:6C:BB
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019749D5EED82DB1180B7F44AF7C8F8304D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0295
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: 17YBXaR04VZgiV4IlNT/uQe1zTrLG2vpBF0T4mYQ/CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ee:d8:2d:b1:18:0b:7f:44:af:7c:8f:83:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=b3bc291241ba7db58d6dbc4f58ea9dc47f976cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:87:8d:93:b9:6b:f8:72:0d:d4:45:1b:c6:
44:8f:8a:4a:41:0a:f1:40:36:e0:32:2b:c4:2a:4c:
a5:f3:f3:8f:00:10:00:73:4e:dd:9a:37:15:50:48:
3b:a3:1f:d8:bf:90:9d:70:68:96:26:55:70:f7:31:
f9:c5:4d:87:e8:69:b7:08:c2:d3:15:47:ad:4d:72:
b9:a1:f7:7c:ff:b5:55:fb:c4:7c:df:4d:c7:a3:b0:
de:bb:a4:10:43:34:fb:bc:15:38:54:03:7d:64:ab:
5c:5d:6c:e6:46:f7:3c:d5:42:17:c3:83:56:22:61:
ce:8c:b0:ef:a0:01:dd:a8:83:0e:1e:8c:dd:e6:bf:
11:34:c0:c0:b3:fa:63:d7:10:46:1e:b2:35:83:c2:
be:63:3d:a4:ec:e7:a9:79:b5:92:d8:4d:f9:f7:69:
1e:ef:b8:6b:a1:98:46:34:85:94:87:db:89:7c:82:
68:60:b9:a4:34:ec:64:f1:cc:30:d1:58:1a:31:06:
74:b3:b9:0f:dd:c1:6e:6a:91:f1:07:74:19:60:fa:
db:5f:4c:60:42:d6:d6:76:d4:0c:0f:18:bf:8a:d1:
a7:2c:dd:ee:6a:cc:63:03:cb:82:15:65:15:0b:0c:
73:1f:4c:9e:45:f0:30:8e:bf:52:46:f6:88:c9:be:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:29:12:41:BA:7D:B5:8D:6D:BC:4F:58:EA:9D:C4:7F:97:6C:BB
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:33:b6:09:1b:b9:a9:b2:96:38:98:4a:72:cb:4d:31:f6:96:
b1:b6:f3:c5:10:0a:62:59:79:ad:a9:71:9a:10:3a:41:5a:11:
87:e6:5a:e9:63:d7:91:33:17:89:1f:19:c9:44:56:b0:2b:71:
bc:60:76:26:ab:4f:f0:3f:20:ba:97:b9:28:c6:03:99:f0:bc:
67:fb:15:7a:26:e7:b6:29:65:9b:a2:69:25:fa:66:fd:e9:25:
5e:87:1e:4f:88:54:50:c2:21:4b:53:ad:9e:f6:b0:9a:e1:23:
9f:50:59:3c:02:49:21:d9:8f:58:7e:56:a4:fc:0c:79:fd:f4:
9c:e0:f2:ed:67:55:e1:7e:f3:ff:b9:a4:63:2f:c4:03:15:42:
27:fa:fc:ea:1c:a1:df:f4:dd:de:bd:47:86:dc:ff:38:3d:7b:
db:87:ff:d5:b1:c6:8d:65:61:f3:46:0d:2f:9c:c0:84:bb:68:
c5:81:4a:cd:29:b1:b2:09:1f:4a:16:16:e0:a1:91:1c:52:67:
f8:71:e2:1b:3c:d1:cf:06:29:50:a7:c8:65:e8:74:a4:e2:2e:
e4:87:6a:d3:de:ab:71:75:60:26:d0:05:85:05:ef:30:49:d7:
40:d5:ab:63:36:86:ba:7a:38:98:02:97:52:6f:fe:74:86:0d:
fb:14:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:20:55 2025 by rpki-client