Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: FzMB+MnGdkkxWX0zXwrIMiGwocdDP/gTbanCPSC9bDc=
Subject key identifier: AF:0B:31:9A:E8:5C:36:CE:AE:5A:C4:53:F4:5A:6A:05:94:C5:7B:F6
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 01974D44C07DAA4BD5FC856AA3F9C2A13493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 02:00:40 +0000
Manifest this update: Sun 08 Jun 2025 02:00:40 +0000
Manifest next update: Mon 09 Jun 2025 02:00:40 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: 3wbYOTR367bd+BUUIfOAhRVCBHz8Ol86WXH2LAwjHhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c0:7d:aa:4b:d5:fc:85:6a:a3:f9:c2:a1:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Jun 8 02:00:40 2025 GMT
Not After : Jun 9 02:00:40 2025 GMT
Subject: CN=af0b319ae85c36ceae5ac453f45a6a0594c57bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:01:d6:15:09:5e:10:b9:39:1f:88:c6:33:
18:cc:e5:22:d0:33:50:09:8a:95:59:b5:cc:5b:00:
1b:bc:9e:d5:7e:04:34:97:6b:bb:17:c2:fb:27:fe:
6c:95:c5:2f:1b:a6:0a:e2:3a:ce:cc:b1:cb:b2:60:
50:2b:9b:20:e5:2b:e8:5b:b8:73:00:2f:12:21:4f:
c4:0e:b5:51:23:b3:13:5f:9a:54:74:b0:94:03:3c:
b6:ab:ac:b1:a6:b0:18:9f:67:54:65:1e:4b:9e:9c:
f3:27:bf:f4:cf:8a:7f:b9:13:3c:cb:2a:a7:10:0d:
81:c4:a3:79:f4:9c:58:80:06:d6:3b:e5:9e:8a:c8:
3b:27:16:bd:84:f3:23:87:a5:92:f9:d8:ec:30:9a:
11:84:c8:9f:4a:c4:e6:1f:93:76:fa:ea:60:50:bd:
8e:6d:22:68:32:37:80:0c:c7:95:fb:1c:3e:c7:73:
d1:78:20:3e:b9:46:e1:1d:8c:5f:42:be:3b:98:aa:
1b:09:f1:29:59:04:42:82:a6:77:08:c0:39:6b:51:
9e:f0:9b:86:79:18:27:6c:c9:53:61:f2:87:cc:a9:
49:33:ec:a5:00:6b:69:43:7d:4b:9b:87:dc:ec:97:
03:6a:73:00:05:cf:1a:3b:2d:12:17:80:dd:dc:b5:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:31:9A:E8:5C:36:CE:AE:5A:C4:53:F4:5A:6A:05:94:C5:7B:F6
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9c:60:54:df:b2:eb:36:fd:a0:03:63:87:f9:40:95:ee:16:
26:6f:97:4c:0b:1e:8c:79:3d:87:4f:1a:61:6d:fc:71:7d:d5:
92:56:6f:d8:64:6c:c8:37:c4:0f:a6:a0:ed:8f:fe:4a:e2:11:
5f:29:4e:1d:85:c4:25:68:f3:f1:13:7f:1b:0b:9e:b0:ae:0b:
93:80:5d:56:a6:a6:6e:5d:02:88:48:b4:96:16:52:8c:21:3c:
d4:db:05:98:dc:0b:b3:5a:c4:e1:fe:c3:b7:7d:bd:f2:1a:7b:
aa:98:5e:5e:2f:2a:14:6d:8c:1a:cb:83:f3:9e:66:24:75:d9:
ba:3e:cf:41:ec:9b:cf:79:1e:42:43:92:b5:f4:15:92:58:ce:
e2:66:81:f0:20:71:c9:a7:b7:a4:91:bc:07:81:2b:ba:99:26:
90:95:d9:95:ff:7a:54:3b:2b:7e:a8:9b:41:dc:c8:32:07:c1:
fc:0f:0e:41:6a:04:a2:e6:67:70:0b:09:3a:08:45:14:1a:44:
87:35:07:b7:1c:2b:b6:8e:85:3a:c0:b8:31:c5:e2:ad:ba:00:
63:43:2c:cd:d7:37:3c:e2:b6:8f:6c:1e:ff:1d:27:5a:33:8b:
b4:fb:eb:ff:14:40:c4:39:1a:88:03:ab:c2:73:eb:73:14:01:
53:24:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:02 2025 by rpki-client