Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: 8O9Z1KjFnxElHuATk8aavLk2LrbBRW65mENGrLn7VWc=
Subject key identifier: 19:57:AE:EB:76:DA:0B:58:12:0C:13:31:89:94:BF:E8:27:12:9D:00
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 01977FB15B1D5B7612A4C0F33EC93B77AAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 159B
Signing time: Tue 17 Jun 2025 21:00:18 +0000
Manifest this update: Tue 17 Jun 2025 21:00:18 +0000
Manifest next update: Wed 18 Jun 2025 21:00:18 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: rfRRzgcQsf4udTZ/v1MDDEj/6ykuErHWlM2M/H5d+q0=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:5b:1d:5b:76:12:a4:c0:f3:3e:c9:3b:77:aa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jun 17 21:00:18 2025 GMT
Not After : Jun 18 21:00:18 2025 GMT
Subject: CN=1957aeeb76da0b58120c13318994bfe827129d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f6:39:d4:5c:9d:25:e5:61:43:62:40:5b:b8:
0c:cc:d8:59:76:e6:bd:0e:6f:64:ba:0a:33:63:58:
ea:2f:45:4c:bc:aa:a2:33:5d:fd:ec:6d:e7:f1:03:
c8:0b:10:f9:88:fd:a9:c7:74:3a:d3:17:ea:b3:f1:
38:49:4d:79:67:80:4f:a6:6e:b3:a1:e1:cf:52:a6:
bd:52:66:04:82:27:39:9a:f1:f9:05:51:a4:9c:82:
db:5c:7f:5d:3d:cf:54:5f:5f:11:7a:fa:e6:42:d3:
f7:fd:1a:a3:42:44:67:c4:c7:36:99:e6:18:f7:93:
f2:59:32:3d:ab:5a:fe:89:46:30:d7:15:59:e2:24:
fe:03:91:1d:6e:7a:3e:69:09:a2:62:ff:69:48:1b:
a2:e2:fa:d0:42:13:29:b5:1f:e6:bf:4b:ac:65:9c:
ba:fd:60:64:07:40:61:9b:96:39:81:93:e8:2e:90:
d0:f4:f9:98:da:db:87:d9:da:e5:cc:c2:4b:8d:89:
82:95:df:cb:60:d2:61:ba:fd:f7:87:5c:0f:ab:85:
95:f0:53:f2:5f:b8:e2:1f:d3:07:e8:66:6e:26:a3:
2b:90:db:2e:98:cd:bc:e1:c0:64:77:53:3d:18:8b:
a2:7b:36:22:72:58:02:78:1d:a6:45:d5:1a:2b:92:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:AE:EB:76:DA:0B:58:12:0C:13:31:89:94:BF:E8:27:12:9D:00
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:79:db:4d:15:dc:cd:2b:0b:2d:13:ad:7a:85:99:cc:08:
a6:90:18:0c:a1:73:9c:45:86:fc:d0:02:14:5c:a9:a0:2b:ae:
d2:49:44:50:7d:ad:30:12:81:88:75:81:ba:1d:e7:e0:26:95:
b9:fb:63:cb:78:d3:cb:73:25:13:76:26:39:f7:ea:3e:46:9f:
16:52:29:0d:66:32:84:ae:49:0e:38:0d:87:85:e2:2b:b1:7c:
88:91:c2:a7:e3:34:e3:4e:3e:51:be:49:da:7b:3f:ac:98:1d:
4a:58:40:e4:af:3b:41:ab:cd:62:bf:a8:82:4d:9f:f4:dc:8b:
30:51:33:9a:ac:1a:5b:a7:ca:5c:68:59:6e:3f:17:5f:89:c3:
aa:4e:55:61:2a:3c:43:c8:62:78:91:f1:09:38:9e:07:56:92:
fc:7f:af:72:a4:7c:cd:22:74:f8:e5:f4:0f:8e:95:4a:21:e8:
c0:90:bb:79:cf:5c:e8:32:eb:09:8d:c4:ae:36:c9:0f:58:f8:
eb:a7:ea:33:68:b5:fa:52:06:b7:61:3f:0c:79:be:a7:85:4a:
06:96:34:d2:6f:da:9b:0e:6f:dc:26:c6:19:da:10:ed:49:1b:
4f:e9:18:0a:ee:98:c2:b9:21:0f:49:ac:5b:41:3f:a0:0f:88:
af:42:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:28:03 2025 by rpki-client