Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: gsKvtZgiUNAiIpY+glmenJyr3rLrPDP1NmTIsVrumxg=
Subject key identifier: 9B:20:E2:EC:BE:BD:F4:5C:9F:EA:93:6F:60:1A:11:13:EA:80:B2:7D
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 01976E8769B42085467D4906776988EAB555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 13:00:57 +0000
Manifest this update: Sat 14 Jun 2025 13:00:57 +0000
Manifest next update: Sun 15 Jun 2025 13:00:57 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: LNdcVzNntk0F4ehFmJZ3aAIkVMAPi8CcqH1XskaPOeQ=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:69:b4:20:85:46:7d:49:06:77:69:88:ea:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jun 14 13:00:57 2025 GMT
Not After : Jun 15 13:00:57 2025 GMT
Subject: CN=9b20e2ecbebdf45c9fea936f601a1113ea80b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:82:3e:48:a5:7f:f8:33:d2:71:d2:23:8e:
15:c7:a3:85:46:06:32:51:9b:7e:23:78:de:aa:c9:
a8:cb:25:92:c5:f1:46:15:ae:02:c8:ab:ec:3d:d9:
b0:99:1a:50:c0:f4:3d:49:48:fe:8a:58:3a:3d:3a:
be:95:6e:30:7c:df:c3:44:82:a3:56:fe:70:13:38:
91:18:58:5f:de:f4:44:b0:92:8e:3f:53:bc:dc:5e:
67:ac:e4:d8:51:71:53:c1:fd:fd:80:4a:9f:2a:bd:
d4:43:44:ee:85:0c:71:66:0c:bf:f3:c3:71:01:37:
c1:0e:cb:4c:3f:a5:15:d0:11:50:0f:59:32:95:75:
41:75:b8:e8:23:9f:17:5f:90:e1:10:e9:f6:3d:ff:
f8:dd:72:fd:a3:b3:78:e2:6b:04:74:33:3b:e9:4c:
fd:00:bf:8a:7e:8d:0e:ca:9c:3b:a3:09:6f:16:bf:
ab:fa:38:6e:61:55:ed:fc:89:9c:5b:aa:b8:21:9b:
4a:e5:20:9f:24:fe:15:69:63:47:95:e1:7f:f2:b4:
4d:d2:d6:b1:55:4f:50:6b:00:d9:3d:a1:ec:b6:c0:
66:14:84:3b:67:94:50:dc:3f:31:a5:ee:57:47:66:
95:79:88:03:00:6d:34:34:66:37:93:18:87:7d:09:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:E2:EC:BE:BD:F4:5C:9F:EA:93:6F:60:1A:11:13:EA:80:B2:7D
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e6:1b:e4:90:c4:ce:d7:36:79:94:41:28:0a:40:ef:30:36:
75:68:b9:5f:a6:6d:a5:d3:95:0e:46:41:fe:32:26:5c:3b:51:
50:ac:5c:27:23:17:ca:bb:a1:48:06:32:e0:49:3b:b7:2a:12:
b9:76:ac:e7:0c:16:78:eb:dd:60:7a:0d:40:3e:ee:b7:0e:f6:
f4:79:82:fe:2d:ba:46:73:07:47:bd:eb:c9:67:98:89:8b:64:
3d:13:e0:5b:69:98:63:93:dd:6c:a5:25:15:4c:c8:e3:ac:cf:
e5:d3:77:ab:7d:c5:0e:6d:22:0f:c6:77:22:ca:be:d7:18:68:
cb:b6:b6:a5:ba:47:76:65:3d:c0:89:17:ce:78:6c:81:ac:16:
b3:2b:1d:73:3f:40:02:16:c6:8d:8e:40:d5:a8:88:25:f1:17:
90:b1:27:26:6d:e7:9c:16:1c:6f:d8:d2:59:92:0c:aa:87:25:
54:d3:43:d6:58:35:ba:00:bb:d1:74:e4:89:1e:ae:82:10:ae:
dc:9e:3c:00:06:dc:bc:9d:73:e1:d1:03:a1:f2:3c:4a:7a:5e:
99:be:21:48:3f:0d:00:02:0c:d5:f1:61:c2:33:59:30:34:a0:
f5:5d:8b:d5:34:74:0b:6d:d2:52:b6:fe:17:c8:87:17:3c:df:
6b:85:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:40 2025 by rpki-client