Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: v6EAT10s7K7x9mIFA4b2y3RiPGP4yslyG4MGnpFvwMQ=
Subject key identifier: 98:22:57:FA:D7:4B:03:F4:6A:00:CA:42:9A:66:87:1A:10:C6:3F:AC
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 0197789CE731ACE6777E58101F714C70CF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 0102
Signing time: Mon 16 Jun 2025 12:00:38 +0000
Manifest this update: Mon 16 Jun 2025 12:00:38 +0000
Manifest next update: Tue 17 Jun 2025 12:00:38 +0000
Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: 0Atx0PAZPtXhYbBproz2N5vxFGVYfee9PAsT1rVsxZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:e7:31:ac:e6:77:7e:58:10:1f:71:4c:70:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Jun 16 12:00:38 2025 GMT
Not After : Jun 17 12:00:38 2025 GMT
Subject: CN=982257fad74b03f46a00ca429a66871a10c63fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:d9:46:59:23:6b:bb:16:b8:29:31:8d:5f:
5e:77:4c:4a:93:77:ca:04:53:bf:03:26:00:a5:5e:
3f:3f:0d:0a:44:f0:47:d0:c7:7d:c7:7d:f1:e1:4a:
15:7c:68:a2:e6:64:28:cb:a0:77:d6:b8:c8:af:4a:
15:80:05:ee:79:1c:1d:7f:f9:21:0d:aa:39:1b:c1:
f8:6f:47:df:75:1e:a6:b6:3e:c8:87:af:e8:4e:31:
d6:69:0a:3d:f0:78:ed:9c:11:0d:0d:35:4f:38:5f:
10:24:82:70:db:13:13:d4:55:2f:bf:54:c5:cf:6f:
19:ab:4c:85:40:4c:4e:8c:69:da:64:4d:17:c0:db:
ac:2c:c3:88:0e:cd:ab:6e:80:34:2a:d9:49:d8:57:
a9:2f:78:9d:eb:bf:2f:9d:79:a4:60:95:c4:a0:d1:
fd:36:59:01:d9:26:7e:ba:89:b7:1a:f8:df:68:bd:
21:ad:66:64:c2:d0:93:69:02:23:99:23:49:0e:0d:
3f:70:45:e9:77:ce:48:5d:49:bb:b0:81:a7:d6:f5:
18:04:40:77:5c:a7:93:44:bb:96:f1:1e:ed:e2:fb:
9e:2c:c5:27:b3:f2:d0:21:a8:09:8e:16:b7:41:ae:
f7:3e:8f:32:ae:2a:0c:e0:d8:bc:89:29:6d:26:7a:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:57:FA:D7:4B:03:F4:6A:00:CA:42:9A:66:87:1A:10:C6:3F:AC
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:bc:bb:02:a2:64:bd:26:99:01:34:77:0e:d5:b4:1a:08:01:
15:65:48:0b:1a:7d:0e:a2:dd:47:3d:ea:15:49:59:e1:3f:92:
cd:8c:72:92:b5:d1:06:50:8a:2f:7e:d5:dd:94:a9:31:d7:45:
ca:3f:42:cc:80:a3:ab:3c:11:d3:a0:76:12:1e:5e:98:09:1e:
b4:4f:55:cb:2b:0a:d7:2e:02:66:8f:ab:28:c3:93:d6:7d:2d:
d0:ca:f1:40:3e:4e:af:52:a6:01:95:b0:2f:5f:7a:44:e3:f6:
42:22:d5:24:2e:dd:c2:7c:03:e3:97:d5:8c:f1:59:9b:98:e5:
53:51:cf:2d:3c:e1:96:22:02:f1:db:e2:9d:12:66:c3:1a:f8:
10:05:ee:eb:8f:09:fd:5d:e9:eb:36:b2:33:cf:0b:aa:b4:48:
13:96:3c:80:1b:f6:bb:d8:d8:79:07:21:74:65:19:fb:36:d8:
bd:96:1f:71:37:3a:b6:f3:f6:24:a7:00:97:e6:2e:b8:eb:50:
b4:01:69:5b:15:ce:fe:9f:12:bd:09:37:fb:67:5b:aa:55:4a:
bf:77:80:93:db:f4:29:c8:6a:9a:d4:25:45:75:da:0a:ee:86:
aa:ab:60:89:36:47:a3:87:73:57:a7:0e:2e:44:25:db:86:b7:
9b:79:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:24:50 2025 by rpki-client