Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: 0yQyWQCdCBdO6LnMRSovOlJfsVcnGVZIbSAFp0ARUzg=
Subject key identifier: 88:11:FE:66:A3:D3:F5:91:D3:C1:35:F5:43:EF:6F:98:B5:16:AD:7C
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 01977075D94EE2F7A958376490BCF257060C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0A12
Signing time: Sat 14 Jun 2025 22:01:00 +0000
Manifest this update: Sat 14 Jun 2025 22:01:00 +0000
Manifest next update: Sun 15 Jun 2025 22:01:00 +0000
Files and hashes: 1: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: CYFkqXE4GoACaUOCfHBeCFEJr39GpAvJm0nXRfT1ANE=)
2: r2nr9uHWjEIdTibij9wAoHFt-FM.roa (hash: 9uPtC9m4AAQGXek/5tdGjDekJKVu5XPicOZ4ymE6WZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:d9:4e:e2:f7:a9:58:37:64:90:bc:f2:57:06:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jun 14 22:01:00 2025 GMT
Not After : Jun 15 22:01:00 2025 GMT
Subject: CN=8811fe66a3d3f591d3c135f543ef6f98b516ad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:8a:cd:cc:5a:30:99:56:00:9e:7c:f4:fd:
4f:76:61:1a:ca:f9:8e:de:bc:4f:58:37:09:b0:aa:
14:e0:e5:e7:34:e2:76:f1:80:8f:68:8a:94:b6:1e:
cc:43:bf:5a:cf:c7:bd:7c:f2:53:67:d2:f3:c2:b1:
0c:08:da:dc:70:d0:f2:56:dc:15:a4:4c:b8:e1:29:
ec:11:2e:03:62:48:f6:f3:85:d5:46:99:a3:fc:b2:
bd:fa:95:69:84:25:04:5b:e1:d7:3a:48:56:e4:3e:
3e:f8:31:8d:1b:c1:24:75:30:c2:37:c2:10:36:b6:
50:73:ad:c3:a6:ee:19:11:79:03:64:be:36:fc:ee:
dd:c0:19:a9:f8:1c:8c:9d:3b:6d:34:c4:9b:87:5c:
db:a5:db:0b:76:28:42:ec:fe:ae:20:ef:8d:a9:c8:
59:b7:40:e0:8c:ad:6f:5c:3c:27:e1:b5:7e:d6:c6:
9b:69:9f:99:ef:d9:af:0f:de:c7:85:76:b0:04:a4:
01:6a:26:9a:f7:2a:20:41:1c:fc:e1:af:cb:45:5e:
3f:02:00:39:d8:4b:9e:da:02:55:c6:5d:f3:59:88:
9c:ec:fa:cf:84:8c:8d:40:d9:02:eb:b6:50:7d:ff:
c3:f9:d2:ba:11:46:5c:39:4a:91:32:ac:07:a9:1d:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:FE:66:A3:D3:F5:91:D3:C1:35:F5:43:EF:6F:98:B5:16:AD:7C
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:24:8d:a9:92:fa:2a:63:6d:18:cb:8d:96:26:9b:01:a5:89:
73:3a:02:61:1c:b3:ac:c0:37:d1:05:c9:57:95:b0:86:10:86:
bc:69:a7:e3:41:3c:83:5f:ab:da:2e:14:cf:33:44:fc:06:33:
82:5c:dd:63:09:98:64:7c:80:ca:89:e7:56:9d:6b:42:a2:61:
79:2b:1c:41:4e:f4:33:d7:41:c5:83:66:2f:89:ed:31:e7:03:
f0:f7:f4:f6:3f:55:12:dd:90:48:dc:5b:bc:7e:5d:30:f4:cd:
4e:38:3c:10:af:93:c8:66:ec:36:f6:fe:14:8c:4e:82:0e:3d:
7e:70:47:13:27:f0:94:a2:59:cd:50:87:ad:23:74:a8:a9:d3:
cb:ce:96:12:95:ab:75:37:fa:47:5f:7a:63:5d:74:cc:fe:b2:
f1:45:d9:86:9d:de:d7:58:e4:39:1a:d8:22:c1:f2:a0:5d:22:
36:6e:2d:b3:60:88:9b:b0:4f:ba:8e:5c:cd:4c:92:70:dc:44:
a0:77:99:3c:9c:60:b8:92:ca:b0:d7:42:02:48:aa:13:74:ad:
f5:21:4d:2e:ed:b7:a4:63:f3:29:80:9c:7b:ad:f8:8f:6f:fa:
3d:eb:39:58:4c:3b:0d:bb:65:18:4d:ea:db:81:d4:00:0b:ed:
ca:cb:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:31 2025 by rpki-client