Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: wmQqeOHhNrcZkfwTgEpauAVuAnMbZp2xlWKf92fVJsM=
Subject key identifier: 96:42:F4:BF:09:CC:45:75:2C:62:45:1E:F6:84:11:D5:ED:5C:1D:FF
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 01976997EBE68BF449B1E436D8B718712E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 125C
Signing time: Fri 13 Jun 2025 14:00:53 +0000
Manifest this update: Fri 13 Jun 2025 14:00:53 +0000
Manifest next update: Sat 14 Jun 2025 14:00:53 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: u83XAxqSSPaThdJonoePk5b2x0OPeNLzI8q72wKHOy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:eb:e6:8b:f4:49:b1:e4:36:d8:b7:18:71:2e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Jun 13 14:00:53 2025 GMT
Not After : Jun 14 14:00:53 2025 GMT
Subject: CN=9642f4bf09cc45752c62451ef68411d5ed5c1dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:db:9b:94:97:c7:3f:9d:83:1a:1c:63:2f:
aa:d1:96:e3:31:04:2d:7d:37:e0:48:2e:c4:b6:f6:
a3:68:5a:a7:30:07:2b:69:01:36:76:4f:d1:68:3f:
4e:5e:8f:7b:d3:b6:f5:f4:10:34:79:33:bc:d6:e3:
64:b6:dc:29:03:a8:6d:4b:21:16:d7:f9:03:45:80:
36:ae:c8:2e:f1:4a:73:e1:9b:46:d6:42:13:60:33:
a3:bb:6c:dd:04:15:1a:90:a6:0b:9e:99:e3:e1:35:
08:af:e9:d9:04:55:d0:d8:4e:82:f1:a2:66:55:23:
3b:dc:7a:6d:9c:5c:fb:3d:0a:99:20:cf:cd:e2:97:
a1:39:92:2d:e3:d0:84:41:c5:75:71:b2:56:cd:8f:
e8:5d:a0:52:fa:ea:6e:7b:ae:c3:af:eb:69:bb:32:
0d:8a:9e:ab:22:8a:9b:54:4b:17:55:dd:8e:d9:79:
a4:ec:a0:6c:06:8e:6d:74:02:13:08:37:b0:0d:4a:
3b:15:10:37:60:4d:58:2c:ca:b9:8c:bf:21:2b:94:
44:3c:e6:a9:0e:9e:10:4b:4a:8f:ea:48:4d:bd:61:
c8:65:e1:d8:19:c5:14:da:cf:b2:3f:fd:8e:a9:d2:
d4:58:c7:d1:d7:a8:cd:76:f4:30:03:ea:35:31:c7:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:F4:BF:09:CC:45:75:2C:62:45:1E:F6:84:11:D5:ED:5C:1D:FF
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e9:9a:9e:3a:cb:a3:4a:63:4d:2c:78:72:84:0f:2a:7c:e7:
a1:70:7c:08:2e:e0:79:14:68:e7:7d:5d:a4:d4:90:94:ef:bb:
f0:6f:62:94:2b:dd:48:80:39:86:53:55:8f:fc:88:64:6d:01:
a1:57:47:f4:96:1c:4a:a3:39:14:ad:0b:3f:cf:ca:a1:15:7b:
cd:8b:c9:0f:f2:09:15:1b:ec:81:d1:c0:f0:c6:c5:1f:0d:3f:
43:dc:d6:9f:8f:f6:fe:a4:bf:f4:a4:a3:07:70:97:f5:d7:a2:
5f:31:9d:c9:b0:a5:08:89:b6:35:9c:03:8e:e8:e1:aa:e5:fb:
96:cc:cb:27:47:61:e3:0b:ec:6c:3d:b8:c0:3b:8b:85:24:77:
a9:fe:73:2a:47:ab:c6:e6:cb:bb:89:97:f7:ef:d6:13:79:69:
57:a4:06:01:ed:b5:73:85:82:58:91:4a:18:52:f9:09:9b:d4:
b4:9e:98:9c:d7:76:b2:2f:22:a2:e6:d0:41:27:1f:f4:9b:4d:
6c:49:36:64:69:81:46:78:21:77:2a:a5:0e:7d:4a:6f:cf:05:
04:cc:df:2d:60:d1:1a:9a:f2:51:cc:6a:a6:cb:2e:fb:ff:a6:
f7:39:44:13:21:1d:c5:0c:cd:50:c2:e2:ae:8f:91:b0:4b:f4:
be:0e:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:06 2025 by rpki-client