Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 7NhxoCIUpXQp/TwVUCdIQ6DFIq1JbXJd23atiyJjcv0=
Subject key identifier: 96:10:72:C6:CD:90:D9:5F:1F:76:2C:01:A2:ED:92:66:01:BE:50:27
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 01976F62F8676DB2A853844BD920C0A04AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 08AF
Signing time: Sat 14 Jun 2025 17:00:46 +0000
Manifest this update: Sat 14 Jun 2025 17:00:46 +0000
Manifest next update: Sun 15 Jun 2025 17:00:46 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 7AX0PFe77vyFysjEOGimmVrp42CUkRAKkX2Fd1udRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:f8:67:6d:b2:a8:53:84:4b:d9:20:c0:a0:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jun 14 17:00:46 2025 GMT
Not After : Jun 15 17:00:46 2025 GMT
Subject: CN=961072c6cd90d95f1f762c01a2ed926601be5027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:a3:a4:2c:d1:f2:66:41:02:1b:a1:f2:97:
5c:02:c4:d6:2b:6d:8a:59:7e:c2:8c:e5:2c:7c:1d:
f3:9b:b8:63:e6:1b:7d:ca:c3:84:d3:1b:e6:04:5c:
cc:64:65:4e:27:61:1c:7d:2a:a6:b3:38:89:bf:c2:
fe:17:5a:d5:a2:46:11:15:56:a1:05:fb:47:44:aa:
ba:84:29:63:b9:10:1e:d4:02:34:d9:8b:60:f9:01:
15:c4:27:cf:53:13:1c:f9:15:b1:4e:ee:44:4c:24:
b5:96:bb:e4:66:3b:e9:a0:34:de:0d:74:d3:86:e9:
a6:d7:af:3b:ca:79:fa:9a:c7:47:ea:d7:d4:47:4d:
f5:a1:30:7a:87:f0:ea:0b:19:1d:f3:a8:47:fe:43:
50:d6:71:a3:e3:da:40:d5:47:a9:d1:0f:1c:91:06:
01:16:b4:cb:b1:6a:38:72:80:96:90:fd:b6:5c:df:
03:31:e7:fc:33:aa:b6:56:34:64:b4:8f:97:06:50:
e2:83:14:26:24:2c:96:29:6f:d6:a0:22:dd:d3:4e:
3e:65:72:28:08:b8:46:12:65:0f:66:09:ed:89:0f:
95:49:13:ae:a0:83:45:87:22:24:5b:3e:d3:c0:cc:
2d:80:35:00:16:69:4b:7f:97:6e:c1:81:af:74:ea:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:10:72:C6:CD:90:D9:5F:1F:76:2C:01:A2:ED:92:66:01:BE:50:27
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:03:91:f3:c5:59:ba:95:89:ae:97:e4:4f:b3:cd:f2:58:bf:
db:bc:c5:ca:85:1e:a9:bd:3c:bb:0f:98:51:57:3f:45:1a:29:
2c:f5:75:27:b4:7f:9f:a9:8e:9f:44:4b:fa:7e:ce:8a:e3:b4:
7d:05:df:44:81:45:ff:4b:75:6f:f3:9f:64:ee:11:89:41:1a:
70:12:ca:43:9a:2f:e5:41:16:11:26:a8:5c:90:8d:db:94:2b:
86:55:9f:82:1c:ea:41:2c:0c:ee:c0:56:c5:05:26:ab:48:7d:
d9:24:39:3f:44:4d:b3:66:45:10:ef:88:63:38:95:eb:25:05:
6c:e8:2a:ca:63:a3:c6:9e:56:17:9b:67:32:b0:13:94:23:10:
fe:f2:dc:81:10:57:7b:f4:8f:c0:c3:77:7d:b4:b4:85:7c:45:
0e:48:88:a2:69:95:ad:0d:c0:74:71:cb:a0:8e:87:41:5d:69:
42:51:bc:31:c8:25:36:5e:d8:82:7a:50:11:6c:d8:7c:06:65:
fd:2b:33:ce:96:b3:99:49:cc:12:9c:3b:7d:1d:30:a0:cb:44:
2a:ac:90:d3:02:e5:5a:31:6a:7c:ce:40:99:c7:2a:50:8e:29:
5c:86:1c:5a:40:a5:10:69:1a:dd:49:63:0c:14:0c:62:0b:1b:
74:44:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:52 2025 by rpki-client