Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: y6EFsJC6ETpg+zZxo0M+Vy9lwd+udqqwXL23LzcFlmE=
Subject key identifier: 33:50:76:B1:08:37:CA:D2:06:89:62:6C:46:96:2D:98:27:5B:75:56
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01976FD0B28CC43E649BE1380FD5DB780BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0486
Signing time: Sat 14 Jun 2025 19:00:37 +0000
Manifest this update: Sat 14 Jun 2025 19:00:37 +0000
Manifest next update: Sun 15 Jun 2025 19:00:37 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: uKbzMLSdDkG595dADwFxFGa7kzbowidjmxwUaTbqAxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b2:8c:c4:3e:64:9b:e1:38:0f:d5:db:78:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jun 14 19:00:37 2025 GMT
Not After : Jun 15 19:00:37 2025 GMT
Subject: CN=335076b10837cad20689626c46962d98275b7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:9a:7a:20:b0:af:35:51:df:a0:76:5b:a5:
d5:2f:4b:ba:b8:da:34:1a:c4:69:74:56:29:04:80:
ad:05:d5:0d:a9:ba:b7:48:53:6a:da:09:62:32:27:
1b:1b:1c:4a:8e:df:38:d7:6c:b7:51:1b:46:f5:34:
36:6b:2c:87:a1:41:cb:1c:85:6a:0e:e6:ef:c6:45:
d2:98:63:e8:b1:14:58:1a:0f:5a:03:87:1a:7c:b3:
9a:21:c9:ca:0a:c3:7d:ff:46:78:b9:ab:42:63:8b:
49:04:3e:e6:b8:28:af:d1:5a:48:a2:23:b6:8f:0b:
08:fd:33:93:27:64:75:c8:43:a1:66:dd:71:b4:60:
9f:66:a0:d7:31:18:f2:44:bd:e6:51:62:95:39:fa:
21:58:18:58:07:01:a9:51:b7:16:5a:67:fe:13:09:
56:e4:0f:e8:2d:44:59:85:4a:13:cd:37:b2:6b:f3:
f3:72:df:7b:12:9e:84:e4:48:d0:4c:a6:66:81:94:
07:1d:b3:75:b0:b3:5d:00:8e:af:99:1a:81:ed:33:
e3:58:fb:cd:95:70:a3:8c:4e:64:04:8b:5a:9a:ba:
90:0f:32:e5:80:74:44:21:a1:20:3a:9c:9f:d2:96:
1a:3f:c1:41:cb:45:eb:e5:eb:cd:d9:f0:f9:54:5b:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:50:76:B1:08:37:CA:D2:06:89:62:6C:46:96:2D:98:27:5B:75:56
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:b4:75:8c:bd:6d:a9:71:c0:94:a7:20:8a:61:45:39:42:
08:b5:23:c7:3d:55:9b:51:48:2d:81:b4:3e:9c:65:89:a5:77:
5d:f9:2f:9c:a3:34:7e:7a:9a:a0:c3:eb:7a:83:ac:ee:45:1f:
b7:af:a5:ae:0a:42:b1:b3:cb:45:e8:ee:77:85:08:9b:59:bc:
62:80:02:0c:0e:bf:cd:fc:0d:60:90:ae:c5:11:85:c1:06:5f:
19:b1:37:77:2f:c6:15:eb:10:90:63:b3:27:53:93:d9:5e:77:
e9:16:c6:7e:7c:bd:25:c3:3c:a9:cf:f7:e4:1d:c0:4b:62:9d:
8c:7d:80:37:e9:f9:36:db:09:a5:94:6b:36:40:75:fa:de:12:
e3:bb:a9:37:0b:be:41:3a:86:48:e0:b9:50:e7:ca:25:ba:ae:
76:7c:b9:33:3b:47:33:71:37:e7:87:b5:7d:c3:f3:5a:df:78:
3f:23:18:78:b4:6f:56:3b:bc:c7:a2:fb:13:92:a3:ae:c2:fb:
65:3d:09:aa:64:0d:51:9a:ba:20:da:8c:08:0e:35:8b:47:d0:
ec:de:bc:f1:bd:0c:5b:cd:80:79:67:8e:c5:4b:68:eb:1d:97:
46:8b:48:b8:63:8f:14:2f:ca:bd:3f:a8:a0:6e:9a:d6:05:dd:
c2:dc:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:22 2025 by rpki-client