Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: oqplDXali8S8kjqjfOtetzZwtDys9Je3wGh5nB/IeNg=
Subject key identifier: 3F:DF:A8:3B:09:01:0D:FE:03:9C:52:2D:C9:E7:7F:46:D7:2E:60:64
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019773AD8A1C075890639AFBD92038EB6751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 164A
Signing time: Sun 15 Jun 2025 13:00:42 +0000
Manifest this update: Sun 15 Jun 2025 13:00:42 +0000
Manifest next update: Mon 16 Jun 2025 13:00:42 +0000
Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
2: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=)
3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
5: iLiQdmyWfTSKLtGAKTv8i9pD7b8.roa (hash: Kr8U4lUGZbLkZ8pUjbEG8aEkHuf+c7USfKgTZhieF7c=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 7jzBEQy38hkILgBDMx9NVr2nIVoh1XTPsLuR8ttjZe0=)
7: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
8: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:8a:1c:07:58:90:63:9a:fb:d9:20:38:eb:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 15 13:00:42 2025 GMT
Not After : Jun 16 13:00:42 2025 GMT
Subject: CN=3fdfa83b09010dfe039c522dc9e77f46d72e6064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:2d:e4:87:05:98:70:06:6a:d2:a8:92:0d:
a2:bc:f5:6d:c7:2a:16:11:70:01:d8:86:7b:11:d4:
58:68:09:54:1a:f2:97:2d:8e:f6:13:b8:eb:fe:c8:
5b:80:30:f7:fa:17:3d:21:6f:49:b3:ae:db:22:b7:
b4:d6:f9:50:d2:03:7b:05:04:ba:60:2f:44:d3:c6:
02:da:24:83:3f:c7:e8:0f:1b:7b:07:21:e6:1d:6f:
ee:b5:31:c9:42:66:09:13:89:43:4a:e5:0a:27:c1:
20:78:61:6e:cc:c6:08:92:fd:41:f4:e4:25:28:47:
81:a9:99:78:aa:c2:07:bf:46:73:4a:d1:f6:c0:da:
d0:6c:e5:e9:74:ac:ad:6f:6b:73:3f:83:cf:43:2f:
d1:16:16:e0:5d:e6:47:10:a6:a7:f5:fc:d8:21:13:
57:26:e9:e4:f4:0f:bf:28:b3:de:f6:08:f5:e2:47:
a0:fa:8a:ad:62:66:54:6f:b5:e4:8d:c4:dc:9c:3c:
cb:14:04:a7:b3:17:59:d3:97:d2:9f:d7:a7:8b:d6:
3e:67:fb:c3:9a:02:da:3e:ab:1b:e9:b9:53:cd:eb:
90:7e:3a:f4:3c:37:0e:f4:8c:27:a2:5c:98:3d:04:
79:a0:5a:75:61:39:9f:5d:ec:b8:ea:04:a9:c5:47:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:A8:3B:09:01:0D:FE:03:9C:52:2D:C9:E7:7F:46:D7:2E:60:64
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:0d:f0:0f:7a:30:ba:0f:d0:78:da:20:5f:72:50:2f:14:
02:91:17:56:84:26:02:25:34:73:e2:91:15:b7:57:d3:b4:8b:
d0:b8:32:b9:79:00:9f:c8:48:1f:2b:33:ac:c6:b9:44:f4:c4:
3e:ba:69:db:c1:c3:e2:d9:b2:2d:ed:ba:f6:df:01:ef:28:1a:
6e:1e:77:02:4f:36:e7:31:0c:ff:c2:bd:5e:a8:ff:40:46:7c:
9b:00:44:52:03:fc:9e:ea:65:e6:ca:95:03:de:2d:18:20:fe:
c0:4c:8d:96:36:0b:49:93:fd:63:a2:9b:84:bb:8a:8a:22:a9:
89:ba:b5:b6:f6:6e:b2:d5:15:a6:56:a7:0c:8d:be:b3:53:99:
9b:5c:73:de:82:73:b7:67:e2:6e:a2:63:fe:7c:d5:5d:f4:cc:
72:4d:c2:c8:17:e9:37:56:3f:cc:42:02:ce:fe:09:09:86:2f:
2a:97:7a:b9:71:c5:3a:23:d9:e0:c8:80:be:2c:76:1a:63:64:
c1:ac:fa:58:0e:7e:79:df:b8:2f:17:68:b8:69:df:db:6c:b2:
fc:14:92:3c:b6:e8:0b:6b:a3:0f:b9:cc:cb:17:f5:2c:45:0c:
40:b0:9f:2b:06:73:53:95:55:02:15:1d:aa:9c:60:4e:60:c8:
ec:97:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:13 2025 by rpki-client