Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: N6oNLx5awZxtryks7snMLPOUXBMKxxgeHSNXdqWsnm4=
Subject key identifier: F1:6C:31:72:FE:95:04:1D:4B:83:1A:72:77:1E:EA:E5:06:BD:8A:CA
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 01976BF48698795B8318D8CA87D11971E38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 02CE
Signing time: Sat 14 Jun 2025 01:01:16 +0000
Manifest this update: Sat 14 Jun 2025 01:01:16 +0000
Manifest next update: Sun 15 Jun 2025 01:01:16 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: rCdd8ibqMS1ydMoeIHZJR84FAH+Z4K+USxGHHNfqrqs=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:86:98:79:5b:83:18:d8:ca:87:d1:19:71:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Jun 14 01:01:16 2025 GMT
Not After : Jun 15 01:01:16 2025 GMT
Subject: CN=f16c3172fe95041d4b831a72771eeae506bd8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:57:4d:ac:c1:4f:0c:03:28:00:9d:df:35:
f3:96:c0:02:e8:5e:61:da:58:fe:f0:bf:2d:b3:82:
c1:10:80:f1:35:5e:09:87:b9:bc:b7:2e:78:51:b9:
f6:2d:35:8f:b8:02:8e:da:0d:e7:d2:03:e8:53:9c:
93:c5:c5:c2:9a:c8:d7:01:6c:2b:85:6f:df:e0:9b:
4f:ee:03:01:93:6f:7f:49:7e:0e:76:a9:2b:0c:a1:
53:ae:37:15:0c:12:50:ac:90:d5:25:6d:7a:ac:3f:
9d:5b:e4:f6:e8:1c:6b:1b:ff:f8:11:ba:de:d0:7a:
b7:74:3e:2e:7f:5d:2b:a5:22:4a:7d:d5:43:99:4f:
4d:d8:ed:63:f5:f6:0b:48:06:4a:2f:08:38:9a:05:
ef:35:7a:c4:97:5a:19:10:e1:44:64:d3:73:fc:e0:
22:22:58:f2:6f:97:bc:77:36:fe:2d:76:2f:c4:7f:
2e:b6:22:e1:00:63:f7:ae:86:4d:8c:1d:2e:a8:3a:
76:8c:14:6c:e5:b0:50:9e:eb:ff:3e:45:31:39:6c:
b2:72:60:20:2c:45:be:25:50:e5:29:bb:68:6d:e0:
84:14:a2:89:e3:6c:9e:f0:5e:ed:38:4c:fe:8c:c4:
fd:c3:a0:f3:85:55:c0:ce:e0:4e:65:86:bb:67:2c:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:31:72:FE:95:04:1D:4B:83:1A:72:77:1E:EA:E5:06:BD:8A:CA
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a8:a1:fc:a7:eb:99:de:d2:55:bd:87:2b:ac:75:e2:42:25:
2e:22:0d:04:1f:8e:07:42:f5:0b:f5:86:3d:ab:93:12:de:2f:
80:9a:50:66:5e:80:ce:90:fa:00:6b:6d:77:55:79:ea:9a:57:
2d:88:c1:9f:26:15:cb:9d:83:79:a0:e8:0e:a6:3f:1f:c4:6b:
b6:cd:cc:a1:de:a0:a1:3c:ad:ae:55:02:e8:2e:de:af:b1:a9:
80:0e:b1:4c:2d:b3:d0:76:d6:c7:37:f8:f2:7f:06:30:08:9c:
88:33:42:8d:b9:b0:3c:e7:56:d5:ea:16:83:12:e5:e2:22:c4:
6c:66:90:ab:1d:63:88:31:af:20:09:59:74:56:8f:dc:db:0b:
89:d5:82:c2:19:c8:2e:8f:31:16:41:4b:57:59:29:7c:2b:cf:
18:25:ab:2c:25:32:19:49:29:5b:19:2c:7c:d9:92:8b:61:e1:
e6:46:a5:34:f2:fe:91:1c:98:b8:70:44:7b:1f:1d:4a:c7:a2:
bb:35:e8:6c:e5:ff:0d:f9:9c:af:88:20:2a:c7:10:a8:d3:c7:
7f:00:2c:a3:79:53:94:d1:a0:28:13:19:74:3d:80:af:30:dc:
79:7c:b1:50:20:ca:32:57:eb:bd:06:ca:3a:81:ed:88:2b:be:
fa:8e:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:32 2025 by rpki-client