Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: jiONmcoZhwd1v0rwkWv3yW0legHOmoXczu8n2fVtwc0=
Subject key identifier: 3C:09:FB:7C:9D:57:F5:FE:99:9E:EA:14:4C:5F:04:AE:26:E9:F0:3F
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 01978847ED1E5905E68FAAAAE08CFA02DEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 02B3
Signing time: Thu 19 Jun 2025 13:01:44 +0000
Manifest this update: Thu 19 Jun 2025 13:01:44 +0000
Manifest next update: Fri 20 Jun 2025 13:01:44 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: UA/hUlGZFvbn1wOJP12YjTD3+aT/FnBhdL4QMVL8BPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:ed:1e:59:05:e6:8f:aa:aa:e0:8c:fa:02:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Jun 19 13:01:44 2025 GMT
Not After : Jun 20 13:01:44 2025 GMT
Subject: CN=3c09fb7c9d57f5fe999eea144c5f04ae26e9f03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:e0:df:49:43:da:38:eb:e2:32:11:13:3b:
7f:37:32:e3:62:47:6e:38:71:b5:ed:5e:44:72:8e:
7a:93:70:61:c8:bf:d8:03:50:57:68:85:ba:4e:70:
46:5e:2c:58:29:0a:42:0f:f0:ca:10:67:ab:ca:29:
27:75:59:e3:10:2e:55:88:5c:aa:f7:4b:5d:68:50:
1d:e2:9f:6d:dc:e6:c2:30:e9:1e:80:b1:6b:30:0b:
d0:40:86:eb:e8:b7:d8:87:82:0f:9d:82:92:75:d1:
6d:09:65:4e:a3:13:27:4a:92:af:ce:94:6d:f9:fc:
1d:13:27:6f:04:fc:18:ed:c9:a4:5f:96:75:21:6f:
07:3d:da:f4:df:99:92:d4:3d:3f:5d:7f:77:fd:c5:
53:ab:15:5b:be:47:14:43:ed:fe:d2:32:65:53:83:
ac:d7:c8:c7:38:00:9a:9e:16:ca:51:65:cf:01:41:
86:19:9c:d7:18:9e:c2:90:3a:4a:6a:a0:9b:05:b7:
01:a0:5f:96:09:a8:e8:fa:28:9a:ec:99:68:ac:dc:
b9:f7:b5:f9:63:51:03:55:21:00:27:97:77:8a:b5:
9c:9c:74:ac:c5:1d:90:3a:20:b9:6a:fa:d2:bf:f4:
2b:38:e3:bb:2c:f9:32:d5:18:07:31:6d:89:eb:f4:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:FB:7C:9D:57:F5:FE:99:9E:EA:14:4C:5F:04:AE:26:E9:F0:3F
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:72:5e:df:63:b4:c8:fe:63:b5:3a:11:c7:a6:79:e9:00:9a:
8a:ba:c3:42:15:96:8a:12:a5:6d:3a:87:7e:89:2b:65:dd:9d:
f3:b4:31:d1:98:d9:27:f5:d0:30:e3:29:c0:bb:48:92:d4:8b:
8f:2e:64:07:ba:cd:cc:f4:83:6d:7f:fa:bc:79:70:ef:df:3e:
27:7f:ab:99:bc:83:3a:f5:3b:e5:aa:7a:e9:9c:cc:06:43:95:
33:38:93:02:e6:98:51:2b:b4:f6:b9:dd:e4:40:25:2c:80:2d:
74:6f:d1:f3:da:ed:8e:70:be:65:72:65:54:73:54:0e:60:64:
80:e2:cf:9b:fb:b9:c2:34:de:a7:0b:cc:3a:24:45:86:9e:ec:
b0:b2:46:ff:92:60:ec:2a:87:7e:09:ac:e2:96:75:71:5e:e2:
90:e9:41:b0:d4:60:05:e6:1f:9e:37:c5:25:23:75:62:94:77:
f3:39:0d:d1:db:66:4d:4f:e4:f6:b6:e8:23:3e:54:ef:c4:c1:
46:a9:7d:f5:34:ec:b0:d0:b9:6e:cd:57:81:7f:b2:9c:2b:36:
c4:28:46:67:78:c1:f2:aa:4c:9f:34:e8:1b:c1:e1:6a:24:0b:
ee:a3:74:54:50:a3:38:28:61:fc:38:d2:b1:fc:68:1b:ff:d5:
10:05:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:19:35 2025 by rpki-client