Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: a4cjC0PAN8vsKs6WVjSRz8fcBopxIqLO7LnBQvIKBVk=
Subject key identifier: E5:59:07:B3:71:45:3F:C5:43:43:0A:D3:0A:A7:A2:46:83:14:30:BD
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 01976D06B1A383F620D2E83B725C73E5A2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1551
Signing time: Sat 14 Jun 2025 06:00:44 +0000
Manifest this update: Sat 14 Jun 2025 06:00:44 +0000
Manifest next update: Sun 15 Jun 2025 06:00:44 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: 06pxfBIBsdfwItlrc4qYARIUac9We0JJvoE7bKN6lOc=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b1:a3:83:f6:20:d2:e8:3b:72:5c:73:e5:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jun 14 06:00:44 2025 GMT
Not After : Jun 15 06:00:44 2025 GMT
Subject: CN=e55907b371453fc543430ad30aa7a246831430bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:5e:48:55:e3:a5:b3:af:2e:1c:af:f6:73:
0a:3d:4d:27:dd:51:62:be:c7:4c:0f:ae:a6:a0:9b:
b5:64:02:24:5f:aa:14:f9:38:15:c9:b2:4c:b1:ba:
39:c2:7d:c9:ba:82:a7:ec:d0:d6:4e:c7:ec:6a:21:
65:64:ff:cb:2b:32:69:9f:95:a2:7a:8a:d9:1e:1e:
98:d4:96:90:a0:d3:46:52:5d:d8:d9:4a:3e:16:15:
1f:08:f3:72:53:65:98:a8:3b:21:7b:f5:b2:29:cf:
ad:7d:92:72:a6:f1:c0:39:20:d7:43:c3:04:17:86:
e8:87:9d:53:fd:36:8c:ed:5b:4b:01:5d:eb:8d:91:
e8:34:7a:72:8b:67:aa:9b:0f:d0:1c:b6:2e:53:e6:
56:ca:d3:e2:75:6d:da:de:3f:9b:f0:db:2e:d7:83:
82:65:50:45:71:49:5c:f6:e0:ef:16:b2:d4:46:ad:
66:7b:9a:7d:14:69:d9:11:7d:c7:e0:b0:ea:76:4e:
c3:9d:10:c3:54:1e:d6:a8:2b:21:9d:9e:33:0c:cd:
c1:57:af:6b:86:e2:a2:16:2d:94:f8:24:1f:ae:81:
ae:9a:ad:8a:c8:bc:30:fe:44:8d:a3:70:7e:a0:0b:
e9:41:c4:c6:e0:36:a5:4c:a8:2e:96:36:b1:2a:44:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:07:B3:71:45:3F:C5:43:43:0A:D3:0A:A7:A2:46:83:14:30:BD
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:6d:3f:d3:c8:cf:f5:00:85:87:4d:9c:0c:bc:f7:60:d2:
dd:f3:48:4d:91:91:da:42:53:11:6c:9e:7c:56:43:b9:3e:ab:
3c:fe:7b:42:b9:97:72:a3:ac:83:33:46:6d:f6:f7:a7:23:4e:
70:e6:ab:e2:20:5f:70:43:d4:e2:ef:85:0f:57:73:03:27:11:
58:c0:77:02:97:d6:96:78:32:d0:c8:58:82:62:43:56:af:24:
99:57:1c:03:f6:3e:e7:7f:1f:07:bb:bc:cb:e4:21:4c:39:f4:
b4:fa:7e:f9:e3:6f:a8:9d:1e:6e:9c:50:1e:d4:75:98:f4:41:
cf:cc:bb:70:8b:7e:40:82:cc:9a:62:d6:b6:57:58:f5:6a:6d:
01:2c:21:f9:9b:f4:ae:db:4b:d0:d6:71:4c:32:e3:ba:54:df:
73:8f:4e:61:68:68:54:8b:75:5f:6d:1d:d4:6f:ca:60:5e:cf:
43:01:b6:c0:14:34:cc:5d:ec:6f:fe:1c:1c:15:63:57:78:c0:
18:89:1b:b5:18:a1:04:4e:a1:4a:d6:e5:42:2c:c7:ec:a0:dd:
ca:f9:20:19:0b:a7:8f:d9:4b:64:34:97:45:1e:26:ed:1a:ba:
cf:22:c9:c6:e7:ab:74:bb:d0:4f:da:48:1e:9e:be:9c:3c:6c:
cd:b9:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:14 2025 by rpki-client