Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: uT1NFxcN7zdYZ+dQwJ6xJunQTlXnAER3PYAmsWgn6uc=
Subject key identifier: 9A:79:39:8F:58:09:66:73:F8:1A:31:D9:B2:43:48:D6:47:2A:7C:30
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0197688515A9FEE2C9AB5B6145CE7C95DB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 13D5
Signing time: Fri 13 Jun 2025 09:00:41 +0000
Manifest this update: Fri 13 Jun 2025 09:00:41 +0000
Manifest next update: Sat 14 Jun 2025 09:00:41 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: 98b6G/FU3jnP6ha2JKLuIUjRf5qVRnf/ALXBHj74+M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:15:a9:fe:e2:c9:ab:5b:61:45:ce:7c:95:db:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Jun 13 09:00:41 2025 GMT
Not After : Jun 14 09:00:41 2025 GMT
Subject: CN=9a79398f58096673f81a31d9b24348d6472a7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:07:d1:bc:11:e8:f6:73:b1:23:37:a1:f0:
d2:78:68:b3:18:05:60:6a:c1:45:48:5b:66:63:c3:
28:2a:b9:d3:d8:83:17:07:2c:ef:b7:e9:f9:3b:f8:
de:73:24:cc:6a:16:9d:e0:ef:e4:15:83:2d:5b:13:
67:e1:30:56:9c:f3:19:56:06:cf:6e:5c:d8:b9:d9:
98:62:1f:07:22:6b:88:39:8e:89:09:e8:2c:da:b1:
14:3e:75:ae:2c:31:4a:49:64:be:bc:95:21:f9:3c:
7f:70:7e:83:db:4b:96:e8:94:ab:af:fa:b6:6f:28:
81:b1:09:5c:30:de:af:6e:b4:27:9c:46:b4:e7:fb:
e8:03:60:7a:8c:fe:e9:cd:44:7c:3a:d4:1f:a6:79:
c0:df:c6:bf:41:54:a0:82:d9:6d:e7:f3:fb:02:57:
56:70:e3:5b:ed:e7:33:5f:43:69:4a:b0:f9:99:b3:
18:c4:91:69:1a:7d:a9:e4:aa:2a:95:92:5f:29:7f:
07:f4:06:6e:e9:7c:63:61:fc:34:c0:a5:37:00:56:
27:73:8b:40:10:51:be:76:0b:1d:ac:b7:4a:5e:19:
f0:69:0a:31:3f:40:26:a3:d4:8f:56:89:bf:bf:5c:
bf:d7:b4:98:77:35:af:d8:0e:92:41:a9:99:ee:96:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:79:39:8F:58:09:66:73:F8:1A:31:D9:B2:43:48:D6:47:2A:7C:30
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:8d:dd:d6:38:c1:ec:c0:5d:6a:2b:71:4d:d1:71:78:fb:
be:51:83:a1:a6:5a:34:c9:b4:1a:31:7b:e5:cb:45:a4:de:0f:
bd:b1:58:0d:37:03:dc:d9:9d:5b:7d:36:e1:ce:9f:bf:85:f3:
3a:5c:fa:58:b8:59:6e:e2:e5:48:1b:87:66:49:69:35:70:80:
82:d9:0e:61:c2:c5:d0:fa:fb:7c:8e:29:12:cc:04:49:e4:a4:
c1:1e:6b:a2:d5:a4:9f:06:ec:5e:55:c7:37:ed:ac:99:e8:ab:
c5:6a:2a:73:02:b6:ba:c5:b3:06:8f:b6:ba:de:ae:13:d6:e3:
7d:b5:7c:04:3c:e9:1d:c5:88:de:40:6c:c1:14:4a:06:ff:9f:
c8:24:ce:53:01:1b:2e:79:de:f4:7b:db:7b:e7:3b:01:58:77:
a8:74:26:7b:8b:f9:7f:fe:82:13:e2:e9:d9:4f:ed:02:b5:d2:
47:24:49:e7:45:07:1f:e0:16:a1:9f:33:82:6b:cc:76:a9:53:
0e:db:53:bc:18:a6:59:64:ef:e5:86:24:84:a8:37:f8:2a:b5:
6b:dc:07:77:69:d5:4b:8d:7d:29:35:6d:8e:3b:66:96:80:5b:
24:3d:9a:65:a9:6a:b8:40:fb:36:63:c5:65:79:f0:16:45:07:
11:58:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:10 2025 by rpki-client