Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: ddjDp/TOCXsMR1HFiKBPFCv8Lwt/0OKb30XHD8/BcTg=
Subject key identifier: FA:CE:5A:E6:8F:3D:EE:B5:5B:8D:F7:34:74:E8:05:0F:5D:43:F6:23
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 019786C6D8A2188045EA8335D42BD8544EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 133D
Signing time: Thu 19 Jun 2025 06:01:07 +0000
Manifest this update: Thu 19 Jun 2025 06:01:07 +0000
Manifest next update: Fri 20 Jun 2025 06:01:07 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: 25MrSDRyY+WxesDVJfXyYQ50Wdy9GZmlwUZvYD0xq30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:d8:a2:18:80:45:ea:83:35:d4:2b:d8:54:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Jun 19 06:01:07 2025 GMT
Not After : Jun 20 06:01:07 2025 GMT
Subject: CN=face5ae68f3deeb55b8df73474e8050f5d43f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:b0:0a:ae:fd:71:0d:0d:7c:89:16:9c:b7:
23:57:84:ae:60:d9:5c:9a:e2:48:50:21:ca:37:ce:
79:ef:a0:c3:be:15:0d:08:18:41:58:87:9f:49:b9:
9d:11:d9:c0:0b:f1:52:57:81:4f:ac:db:b1:17:13:
e9:8c:1d:a0:09:7a:4c:f2:c8:8c:1a:ee:09:35:5d:
cd:5c:e3:e0:75:2e:5f:47:26:a7:f3:c9:e5:30:dd:
0f:6f:08:ad:4e:f2:ff:58:8c:42:30:65:f6:79:75:
ea:18:a6:1d:1e:a3:ad:43:b6:d1:6c:a5:75:1a:52:
08:74:54:a7:20:36:f7:48:fa:82:12:4c:ac:b0:17:
c6:43:41:7a:8d:c1:bd:b4:76:e9:9a:c3:93:07:2c:
96:ff:37:e6:b6:0e:2d:f2:13:3f:7e:5f:a0:63:24:
8b:37:19:34:1e:00:c7:e0:7d:df:ec:ac:ad:32:31:
55:59:2f:24:50:0b:eb:f1:5d:87:58:5b:1c:0a:59:
43:80:42:46:5d:c4:23:e2:59:40:3b:99:2d:16:45:
02:70:c6:6a:24:2f:93:8f:65:e0:cf:87:c4:8a:37:
53:7e:a1:96:27:fc:7c:1a:10:af:2e:fc:58:cc:e7:
0e:c1:4f:e6:bd:ee:ae:b6:ad:b4:3e:d9:66:21:8b:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:5A:E6:8F:3D:EE:B5:5B:8D:F7:34:74:E8:05:0F:5D:43:F6:23
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:31:eb:13:d0:19:85:dd:d7:8c:e2:70:d0:5e:92:74:67:
2e:4a:02:b8:97:45:f2:dc:a1:b2:0d:c2:c8:6a:47:c2:c5:12:
d6:d3:c5:d9:99:97:90:db:6c:6d:5a:35:ce:e1:b9:f2:40:3b:
28:35:03:c5:00:26:2c:93:9f:bb:33:f8:3b:d5:04:f9:6c:48:
1d:d3:e4:74:fe:ea:4b:52:11:3a:40:df:35:0e:32:27:18:fc:
a3:e4:32:bc:17:54:ec:fa:60:7c:09:ca:a3:62:37:56:8f:09:
76:50:da:b7:ab:30:7e:99:3c:1d:b5:e8:60:07:c7:b0:72:a4:
bd:d1:78:b4:05:75:d0:db:b6:a8:c7:a9:f9:bd:6d:6a:a2:93:
8c:54:2b:96:4b:9b:3e:29:ef:cb:03:5c:ec:7a:7f:08:79:22:
78:12:31:3b:8b:d6:c3:08:56:2a:10:7f:13:b0:b1:9d:18:2f:
41:39:1d:57:d1:13:f1:0e:70:1e:f0:f8:b1:e4:be:6c:00:20:
a1:1b:82:33:e2:dc:c1:7c:19:c4:c5:0e:7b:1d:6b:57:30:ee:
f1:8c:f3:25:6f:a4:b0:2c:be:3c:61:e8:e1:9c:7d:b4:23:9a:
23:38:3e:c9:a2:cb:dd:6e:a2:42:40:d4:ab:be:e9:9c:3a:dc:
38:f3:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:45:59 2025 by rpki-client