Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: vZ7iBR22Zcd0CxG2WsIUeoPQTcRqL9a8Wos85zqepQo=
Subject key identifier: D8:07:49:83:80:7E:54:39:79:0B:F4:28:49:41:6E:FB:97:FB:07:4D
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 01977ED5AC20C0C2A71D953E071867047A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0D50
Signing time: Tue 17 Jun 2025 17:00:21 +0000
Manifest this update: Tue 17 Jun 2025 17:00:21 +0000
Manifest next update: Wed 18 Jun 2025 17:00:21 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: B/MSyUUbXZyp/lSc6ax2vwphRSQFfVgJs+II2rFZbYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:ac:20:c0:c2:a7:1d:95:3e:07:18:67:04:7a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Jun 17 17:00:21 2025 GMT
Not After : Jun 18 17:00:21 2025 GMT
Subject: CN=d8074983807e5439790bf42849416efb97fb074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:ad:85:42:20:0e:0b:78:8f:ef:d6:bb:ff:
e4:1f:de:20:19:c0:90:7f:12:f9:4f:03:1f:83:54:
fc:b2:b0:7d:54:1d:84:d0:f9:0b:38:ef:9f:1f:4e:
5a:44:0b:a9:ed:ad:38:ec:72:3a:a8:44:fc:2c:fe:
d1:c2:e4:cd:54:e8:ab:79:32:db:2b:48:b2:36:af:
90:e3:72:82:7e:26:c4:83:30:e3:82:ee:4d:0f:5e:
68:ff:f1:27:d9:5c:0f:11:f6:f9:29:d4:30:a8:ca:
72:c2:03:62:e4:de:ac:65:e8:98:75:03:36:d3:88:
ee:8d:84:16:1d:46:a0:13:0e:d6:59:6f:97:c9:4b:
e4:50:cf:25:70:52:aa:48:49:32:e5:7a:cd:f9:c7:
78:83:75:ca:24:67:fb:ec:0e:0e:03:33:69:2e:c3:
f4:21:80:b3:dd:2c:32:ba:4a:93:59:71:98:54:31:
f3:2d:c5:ae:cd:99:33:93:10:e7:64:cb:a5:95:f3:
15:74:41:b0:e8:bf:99:3e:96:8d:f1:e6:b0:65:f9:
60:98:a2:0a:51:ff:aa:c4:98:00:3b:69:a4:b1:77:
2c:17:5e:b2:2f:87:5d:56:48:e1:96:c4:0f:2f:8e:
4b:ec:5f:93:a0:e3:4f:e6:0f:42:74:b8:12:b4:ed:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:49:83:80:7E:54:39:79:0B:F4:28:49:41:6E:FB:97:FB:07:4D
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ac:5f:9c:b5:c6:6f:1f:bf:83:67:76:74:25:5c:7a:4d:87:
51:64:ab:95:e2:ba:1e:6b:e3:40:7a:8d:02:8d:3a:c8:0a:6d:
cf:7e:b1:23:17:ed:dc:86:2e:8f:31:46:55:8b:39:86:83:5e:
b6:b3:64:e2:8d:ec:c2:94:63:3e:43:14:fd:c7:a1:91:12:c4:
61:be:c7:fc:71:39:fb:15:28:47:29:7f:3d:56:0c:99:1c:3e:
49:37:08:1c:c6:de:8e:cb:de:f1:66:5d:e6:a0:7d:4d:38:ae:
e3:27:e0:3b:b6:7a:5f:f1:d3:79:e6:0f:66:c4:7e:61:fa:b5:
f9:d4:a2:27:f3:a6:1d:a5:ff:0e:cf:e0:54:e3:af:49:3d:c9:
c4:9c:77:15:e4:9b:c8:5b:ae:fa:4c:29:c5:2a:7d:42:15:76:
3b:e8:78:cc:5e:85:50:c1:c2:85:14:47:b8:79:3e:e1:d1:12:
65:ce:c0:df:74:85:04:a7:09:69:1b:58:c7:35:9f:e5:d9:3a:
02:24:8b:7d:f0:1e:5c:b4:5c:85:65:5f:8f:a9:c1:07:7d:9c:
0c:14:59:06:10:fd:8c:21:31:6a:03:a3:8e:50:5a:89:49:0d:
f7:33:36:b5:f6:e0:c6:d1:f2:e5:f2:d1:2d:a9:3e:c5:cb:90:
25:0a:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:26:20 2025 by rpki-client