Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: PyoNvEI8X1noHY3X0mnw1zTapAmHtenATB10vCsfpR8=
Subject key identifier: 2E:F6:8B:16:A2:13:D9:93:66:9B:1A:C9:50:AE:EE:59:69:BC:93:B4
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01976E878C3469CCBA694A1C9696A0D15E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1599
Signing time: Sat 14 Jun 2025 13:01:06 +0000
Manifest this update: Sat 14 Jun 2025 13:01:06 +0000
Manifest next update: Sun 15 Jun 2025 13:01:06 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: 6C5dX83gjEUhBn3DjanpUwsZBDMKOmJ8zev6QnUQYNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:8c:34:69:cc:ba:69:4a:1c:96:96:a0:d1:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jun 14 13:01:06 2025 GMT
Not After : Jun 15 13:01:06 2025 GMT
Subject: CN=2ef68b16a213d993669b1ac950aeee5969bc93b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:d3:fc:88:b4:d8:49:d4:f4:7b:ff:f6:89:
25:e4:be:28:3b:98:e7:af:45:2f:ea:8f:84:23:89:
54:25:25:2b:f0:44:c6:42:59:3f:f6:1f:02:d4:e9:
1f:6c:ab:c9:b9:c8:7b:8d:85:12:5d:4a:08:17:b7:
29:d5:66:f7:64:f8:6f:88:78:25:9c:74:67:00:f2:
ad:38:9c:69:57:b1:5f:85:ca:ff:20:a1:58:22:df:
9d:cd:0a:a2:2d:85:49:b3:a0:d3:3e:ec:5a:a2:6f:
68:79:9b:8d:7a:c0:47:ed:78:ca:09:0d:f2:3d:32:
8b:6a:e4:75:3b:47:8f:d3:9c:e1:67:ad:27:ee:47:
6e:a0:b0:9e:b6:96:49:06:ce:89:f8:46:3c:01:23:
f2:e6:72:47:18:af:96:90:8e:18:86:b0:b5:29:36:
2c:f0:b9:60:e2:9a:e5:60:e0:5f:83:fe:ae:2f:60:
9b:c8:7a:a1:6a:6b:74:a3:e6:a1:11:fd:ee:89:92:
fa:ed:a2:ea:8b:3f:b5:3f:e8:94:02:07:49:8b:78:
aa:ca:32:f6:4f:19:2c:85:a9:50:4c:ab:93:75:7a:
b3:22:db:4c:99:f4:1b:be:62:9f:a1:ba:44:66:66:
a8:0f:05:13:50:2c:83:ab:31:bb:54:4f:3c:68:c2:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:8B:16:A2:13:D9:93:66:9B:1A:C9:50:AE:EE:59:69:BC:93:B4
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:c4:e6:4f:c6:95:6d:51:e9:61:95:c7:08:9a:95:7f:73:
f5:c4:b1:57:4b:a9:da:7c:8f:16:38:71:fd:f6:b5:59:66:a6:
d2:eb:9b:da:27:9d:9f:6f:ca:d9:21:4f:74:51:72:b1:c3:50:
58:a9:67:eb:b2:73:f4:cd:40:52:0f:a4:1d:02:9b:11:01:89:
04:b1:c0:e3:73:65:49:77:f5:49:27:71:38:32:cb:7b:f1:55:
ca:e4:44:11:3d:f8:ae:66:bb:7a:1f:b0:b9:e5:09:8b:32:ae:
a3:b3:14:e2:cf:eb:aa:67:7f:d4:93:cc:98:51:dc:b8:50:b9:
5a:b3:64:cc:9f:c5:5a:a3:70:df:7c:39:0f:cb:b4:b6:6f:a0:
bb:20:30:13:b5:56:5a:7c:e6:32:1c:3c:a1:0e:60:5f:78:7c:
29:1b:5b:53:97:2d:4b:52:e2:4c:a5:04:f5:54:ed:f5:c5:d0:
dd:9d:e7:7b:0f:81:a2:05:37:40:f4:a6:15:b7:a9:66:4b:42:
bf:31:aa:e3:1a:25:3e:e7:9b:f9:61:fb:2d:bf:4e:9e:f6:3d:
26:c7:03:f7:90:37:da:49:bd:70:99:6d:62:a5:39:c6:89:00:
35:e0:f4:a6:b5:90:81:e1:4a:70:80:4b:c8:60:3f:1d:d2:92:
7e:96:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:38 2025 by rpki-client