Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: 8EvYXbbvdAa31/JC3npb5WZQXdWrBiWYFB4qok5r7Eg=
Subject key identifier: 36:76:53:B5:34:21:33:A1:D0:74:67:A8:12:B7:11:CD:56:FF:4C:8A
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0197700792E10066435C80F62A2D461D6883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 1333
Signing time: Sat 14 Jun 2025 20:00:33 +0000
Manifest this update: Sat 14 Jun 2025 20:00:33 +0000
Manifest next update: Sun 15 Jun 2025 20:00:33 +0000
Files and hashes: 1: 7Cbq0-9TtgLYQeu52VZUWksHnwE.roa (hash: JkpuN02DfnBu6RSAax0V6uNhARwqnNXw/JbyXJtDiJ8=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: 0tPO/wDYaTTh1ANOQ4hIdttNGu4DD16FSNNKsP5mB2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:92:e1:00:66:43:5c:80:f6:2a:2d:46:1d:68:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Jun 14 20:00:33 2025 GMT
Not After : Jun 15 20:00:33 2025 GMT
Subject: CN=367653b5342133a1d07467a812b711cd56ff4c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:0a:ec:65:8b:9c:de:1a:26:a0:7b:14:fe:
b3:c6:62:0f:a3:2e:3c:6a:06:52:c7:82:0d:16:50:
bf:81:fa:49:b3:60:65:a1:1d:8f:77:c1:85:c0:e9:
ad:d4:3d:f8:95:52:fc:71:d0:cf:f8:24:77:68:50:
14:5a:46:1a:8a:d4:3b:a6:23:6e:a1:ad:e5:87:e2:
d9:53:b1:10:3d:b3:09:54:47:a8:c7:6b:64:06:f7:
0c:b3:8d:d5:ca:1a:52:92:e1:76:3d:de:d2:44:b7:
fd:75:22:c3:e3:42:2d:8d:50:71:d5:b6:7c:ff:41:
fd:bf:8b:c3:5c:9d:0e:75:83:c3:48:8d:bd:b1:ba:
60:7e:20:68:ba:02:27:2e:cc:17:8f:ba:8b:1d:ad:
6a:73:d0:89:61:ef:93:28:98:d0:2c:7e:ef:ec:57:
49:4b:87:45:23:73:eb:30:dc:7b:cb:dd:d6:68:6e:
14:21:d2:b8:fd:f0:1f:e3:6a:f7:c3:60:47:63:83:
2a:ae:b2:ed:90:f7:6c:d1:2f:25:40:6f:3d:d2:38:
33:63:17:e1:5f:3d:c2:a9:cc:47:48:7c:c2:8a:19:
03:ed:2e:4c:30:59:cc:6c:d0:8b:95:ea:8d:f2:95:
16:6d:24:ba:78:b2:e2:55:ad:5d:f1:9c:77:a0:50:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:53:B5:34:21:33:A1:D0:74:67:A8:12:B7:11:CD:56:FF:4C:8A
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:ba:a9:24:42:99:4f:39:c8:ad:b1:aa:d5:b3:da:bb:2e:
cf:43:aa:a5:49:1c:c9:68:d5:be:40:74:53:ca:3e:28:15:81:
c5:b9:85:db:26:49:58:db:df:df:4a:95:7b:99:d1:15:55:75:
f7:9f:5a:bb:49:f6:a1:4c:ae:43:26:a9:d6:16:31:e6:2c:5f:
ad:c3:05:cc:47:f6:a2:e0:03:28:77:2c:f1:43:2e:1b:b5:0b:
aa:20:56:ac:cd:9d:23:d1:6f:b4:d7:02:f0:94:28:48:29:02:
30:22:93:c2:d3:33:79:2b:e5:8f:de:fe:9d:63:d2:16:45:22:
77:20:14:e2:4d:cc:c6:69:e7:d6:ca:51:73:02:7e:8b:18:af:
bf:af:1d:7e:94:68:4e:8e:4c:03:8a:c9:73:91:1e:4f:e3:df:
ee:5e:94:e6:41:f8:77:2f:30:ba:6a:53:86:bb:3b:45:fc:19:
24:fa:25:11:2b:fd:b3:26:9f:32:9a:89:5c:4c:87:5d:bd:58:
4e:2e:7d:e6:70:d5:65:87:6e:58:76:f4:54:bc:1b:54:34:e1:
bb:4d:d5:be:8d:1b:01:45:9b:2e:9b:87:c9:c9:0a:6b:7c:9e:
9d:a2:11:39:47:a8:8a:f1:28:ea:73:c4:c3:8d:71:5b:dd:ac:
60:8f:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:47 2025 by rpki-client