Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: OEHSnlEleNpU8dXIXIPvoi+RVe8nBrSSCXXXV8ALIt8=
Subject key identifier: FE:D7:80:07:CD:8F:FE:9A:ED:32:2F:A9:A1:90:86:10:17:43:C0:BF
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 0197703EB8E990E48591AA6CFD4F48621F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 21:00:48 +0000
Manifest this update: Sat 14 Jun 2025 21:00:48 +0000
Manifest next update: Sun 15 Jun 2025 21:00:48 +0000
Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: pg7OPX+ANhx+O4K8atebfUGPrH6Hinq+rl2lVTMAZ6o=)
8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:b8:e9:90:e4:85:91:aa:6c:fd:4f:48:62:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jun 14 21:00:48 2025 GMT
Not After : Jun 15 21:00:48 2025 GMT
Subject: CN=fed78007cd8ffe9aed322fa9a19086101743c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:9c:d2:82:aa:9c:6b:5c:34:85:46:90:41:
45:a3:f8:07:41:5d:73:d0:e4:e0:97:89:ec:b5:88:
06:b3:d5:b5:f0:d9:60:87:c9:0b:c3:2f:1e:e2:68:
8f:13:db:38:5c:c9:82:60:44:6c:97:c5:e3:ba:f5:
8a:10:f4:fa:89:1c:fe:84:09:44:83:2a:30:b6:b9:
a0:7d:22:ce:97:8f:5e:18:9b:fc:ef:c3:ca:08:3f:
59:f2:11:b2:6f:bf:b9:3b:4e:7f:59:8a:3c:15:e2:
c3:b4:2f:72:4d:db:d1:44:51:cd:9a:8f:a9:3b:8f:
23:cb:40:a0:a6:fd:1b:79:28:f6:cc:0f:f1:e4:aa:
4d:fb:1a:3b:c9:23:f1:69:79:26:31:cd:4c:17:97:
b5:f9:66:c8:43:db:27:02:75:86:da:9a:01:b1:bd:
e6:18:7c:69:3b:5b:ac:1f:53:78:5c:78:7e:1e:1d:
d4:cd:13:53:82:b7:df:e5:f2:c7:97:74:24:e5:07:
65:03:7f:07:33:f7:36:ad:b1:a8:32:93:83:88:02:
b5:15:8b:e0:19:4b:bc:bb:d8:a8:f8:d0:24:8b:93:
b9:e9:f3:61:d6:ba:09:11:85:b6:71:57:d8:8e:cb:
66:eb:4f:3e:57:e3:eb:8b:b3:15:2c:a5:fa:69:ef:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:80:07:CD:8F:FE:9A:ED:32:2F:A9:A1:90:86:10:17:43:C0:BF
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:33:47:83:6d:11:84:bc:b8:7a:e1:c1:61:b6:cf:fc:9d:
bb:4d:6f:31:84:6c:b9:1e:3b:8e:1c:f9:fb:cc:cf:4d:50:79:
eb:77:fb:52:38:9e:26:87:cf:9b:35:c8:ad:a6:a4:bc:e6:57:
7d:c8:70:21:05:fd:d1:71:8c:1a:87:2f:e4:d4:f7:96:0d:8a:
d8:4e:7a:18:6b:0a:03:ef:82:d5:a2:b9:ff:33:cc:14:5b:81:
90:c6:71:f0:20:e3:38:73:97:f2:57:e4:0a:70:31:0e:8f:90:
77:e9:a9:d8:85:ea:39:28:b8:0b:2a:f7:22:19:81:62:a7:bf:
d8:2c:22:84:b5:33:58:4e:92:2c:a8:a7:3f:40:cc:b0:49:a4:
19:22:a1:05:8e:2f:c6:a8:24:9d:36:36:d2:2d:42:6e:8c:35:
23:14:39:f5:8d:1c:73:e6:c6:11:1f:c6:54:e8:be:ec:ef:3b:
0f:c7:8f:3a:c2:0a:fb:a3:70:fe:c7:be:9f:44:c5:a3:07:83:
79:63:94:6b:c1:dc:a6:57:45:e0:fa:8b:fe:2c:af:8a:a7:05:
07:96:f6:55:1c:8c:ff:58:7a:0c:ba:16:4b:0b:51:a2:05:fc:
ca:53:0f:6c:a1:a2:15:c1:bd:8b:40:90:19:c6:84:16:0c:1a:
7d:89:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:21:15 2025 by rpki-client