Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: YGdD4elCBINQq3gIRfjKjInj/e6ncZfjAlZcj/u3uoo=
Subject key identifier: 61:CB:B6:84:34:DD:32:17:27:73:EC:C2:39:8D:A9:E0:60:B2:2E:1C
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0197488C9A5E9B9F532AAB1240823CE06595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0358
Signing time: Sat 07 Jun 2025 04:01:03 +0000
Manifest this update: Sat 07 Jun 2025 04:01:03 +0000
Manifest next update: Sun 08 Jun 2025 04:01:03 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: Rqb/0NJF9qjn5btYytsk1cMdKAPbhgEv+iliyUfozwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:9a:5e:9b:9f:53:2a:ab:12:40:82:3c:e0:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Jun 7 04:01:03 2025 GMT
Not After : Jun 8 04:01:03 2025 GMT
Subject: CN=61cbb68434dd32172773ecc2398da9e060b22e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:e8:28:cb:ef:f4:a5:cb:8d:86:d2:bd:89:
36:eb:fd:e3:58:62:04:43:64:51:6c:56:44:52:64:
18:47:c8:28:0d:74:5b:cd:e8:a5:ee:f4:76:d2:c2:
63:51:fd:e2:bb:0c:75:fe:cd:72:f1:48:5e:5a:37:
04:42:46:12:4c:90:73:82:ab:4d:2f:dc:d4:c1:15:
bb:a5:bc:5e:31:4b:b5:d0:b6:e6:61:46:38:eb:71:
5a:ce:a9:6d:58:b0:11:67:b7:3e:eb:8c:82:2e:67:
bd:c0:0d:03:4a:9a:db:04:ef:fd:16:bf:c5:13:cd:
4c:6c:73:bd:8f:5f:58:97:4e:37:fd:92:ef:36:93:
46:d8:17:c6:0c:bc:ad:66:61:25:c5:17:26:37:1f:
24:34:e8:8d:dd:65:5e:6e:08:01:d1:e0:ec:4d:78:
3f:e9:09:3a:92:b3:5a:19:fd:72:89:fa:2a:c3:9c:
4d:a7:c9:8c:9a:8c:99:13:63:f6:6d:87:74:8e:35:
63:80:40:d5:e8:41:95:8f:7d:25:38:e3:b3:a0:68:
e0:7f:2e:d9:ac:28:9b:fc:54:f3:0e:93:11:94:17:
c7:5e:a8:d1:83:ee:0d:4b:c4:ce:35:4c:74:1e:1a:
25:b1:2e:8f:25:7f:fd:e5:78:90:a0:df:29:85:8b:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:B6:84:34:DD:32:17:27:73:EC:C2:39:8D:A9:E0:60:B2:2E:1C
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f4:b4:11:98:d6:4b:3a:6b:a8:4d:44:b0:b3:e6:e0:3c:c9:
9a:95:53:76:04:04:92:cd:f2:8e:e8:fb:2e:3d:51:79:ef:ce:
17:18:8a:62:c0:90:a5:07:b9:ae:78:6c:60:03:5a:aa:b2:0c:
c5:a5:d3:58:56:d7:f1:df:10:e6:ba:85:e8:41:e3:0a:df:ba:
f9:db:2b:b7:10:0c:a3:31:3d:84:3c:a8:5d:a1:30:de:eb:00:
bc:27:d1:a5:d6:63:e7:ed:fb:a6:30:58:4a:57:f7:65:2e:f4:
f1:43:3a:6a:be:65:66:47:81:02:55:8d:6d:da:3c:74:20:37:
28:79:22:58:ab:35:2b:b0:18:a8:f7:db:ce:4e:c5:59:f4:fa:
d8:be:2f:98:8e:db:73:05:22:a2:4c:df:50:15:6b:a9:a9:b9:
0e:d8:bd:be:3a:df:d6:a1:4d:16:55:1e:a8:12:95:87:d2:06:
d2:43:ac:1f:22:bc:46:8f:5c:48:28:e2:f0:9d:3e:eb:f2:08:
2f:41:f3:23:5e:f7:2d:88:bc:8c:75:b3:f1:ea:ed:bc:c6:df:
9e:ac:71:13:29:34:42:b6:7c:9a:da:c0:df:bf:73:db:66:c4:
0f:ab:82:2c:e9:aa:56:04:d6:4d:32:6f:7e:61:87:65:5c:ab:
06:67:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:00 2025 by rpki-client