Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: vkMSm+6X6IMkogeczp60bOZ/vwp41oYOodU2XPOkl/Y=
Subject key identifier: 19:5A:30:10:B7:0A:74:FD:4F:01:C3:E3:49:32:C8:02:AD:51:04:DD
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019752D91AA7A7D912AC9B64B066AA9DA65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0C60
Signing time: Mon 09 Jun 2025 04:00:49 +0000
Manifest this update: Mon 09 Jun 2025 04:00:49 +0000
Manifest next update: Tue 10 Jun 2025 04:00:49 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: keYqM6S/l/lF/3i2PViAigyvMnC7Ai+gY6ybXgVbgvM=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:1a:a7:a7:d9:12:ac:9b:64:b0:66:aa:9d:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Jun 9 04:00:49 2025 GMT
Not After : Jun 10 04:00:49 2025 GMT
Subject: CN=195a3010b70a74fd4f01c3e34932c802ad5104dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:b7:2b:39:06:9d:ca:bd:30:ca:e3:fc:91:
83:18:78:96:4f:43:6d:0e:f8:a9:8d:23:86:09:d0:
66:e0:ec:e2:03:d2:b6:ed:7b:26:35:8d:de:57:2f:
c2:69:3d:e6:fa:a8:67:34:0d:5d:dd:d9:46:97:75:
46:84:41:c5:c2:5e:a2:a0:8d:f3:61:47:a9:41:48:
92:49:9d:3a:d2:c8:37:66:2a:46:df:6d:6b:2e:24:
7b:dc:87:80:b2:25:0c:14:bc:5a:55:c8:12:57:61:
ce:13:7d:58:c3:b5:01:45:72:96:52:69:db:07:c5:
79:4e:0c:f5:a3:c6:3d:57:6d:da:0a:42:ca:e5:54:
ea:00:a3:57:e3:f9:db:df:77:0a:c3:68:4b:9c:65:
61:00:ee:7a:8d:28:57:25:c7:57:56:95:62:c2:32:
da:2f:51:c5:3b:07:f2:b2:ed:eb:cf:71:63:fa:80:
a5:04:52:b9:96:c1:d2:6f:5d:11:b9:91:12:5e:4e:
90:1a:36:21:d3:cb:9e:15:fa:3c:45:bc:54:7f:c5:
e1:ef:f6:a9:c9:2c:8d:6a:f1:68:79:90:f6:01:eb:
90:0b:57:b4:18:74:d1:b8:dd:50:fe:1f:dd:d8:87:
e6:1f:ea:99:3e:af:d1:0b:00:5a:1e:12:7a:45:53:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:30:10:B7:0A:74:FD:4F:01:C3:E3:49:32:C8:02:AD:51:04:DD
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:7a:e5:b9:b3:35:2e:47:00:71:83:75:5e:cb:4f:42:d7:
de:c7:72:31:40:46:30:69:ec:53:d6:6c:20:a1:73:51:24:96:
7c:15:db:83:7e:f5:06:25:94:95:1c:0d:84:77:2b:5b:48:06:
f6:b2:f1:41:9f:f8:9e:48:7a:49:45:cb:e7:65:bb:b1:a9:ab:
80:3a:fa:29:10:4b:71:1c:18:aa:01:d1:b6:48:eb:43:05:74:
21:39:01:24:8c:e5:01:27:2c:a6:ac:d5:da:a3:dd:fa:26:4c:
6f:f0:4d:b9:10:29:76:11:42:d1:98:56:ea:56:b2:a6:4e:b7:
0e:e6:e2:14:ad:e4:7f:31:3d:e1:f4:a6:ea:65:0e:70:b3:6d:
66:a7:3b:ed:51:d7:d5:d1:88:40:5a:b5:8d:cb:79:50:b4:04:
60:79:dc:29:90:76:13:81:e9:2d:57:5e:8c:ab:18:c0:2e:e4:
27:6a:03:a9:5f:82:71:8b:90:29:f0:4f:57:aa:36:3d:57:c8:
02:15:11:a5:75:bf:73:4c:b7:46:e4:e3:2c:19:69:59:07:a2:
86:c9:42:80:76:e3:44:5c:5d:d5:85:a1:c2:1e:8b:59:37:65:
79:ec:a8:ca:48:ca:0a:fd:f3:1c:48:c3:16:23:13:c1:64:47:
97:83:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:38 2025 by rpki-client