Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: DOGngsHtGGxFz6TKc8a1sbEeV+Uw/lCdYVDvjCSoZRY=
Subject key identifier: 29:22:42:DD:D6:48:E8:2B:53:21:8F:CC:D7:D1:F5:4E:94:EF:5F:B6
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 01976D06D55BB777404A7746A8C6D8104832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:53 +0000
Manifest this update: Sat 14 Jun 2025 06:00:53 +0000
Manifest next update: Sun 15 Jun 2025 06:00:53 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: mQmiiDur/NTpw5IrA8aihb5lBxXDblPZ2MHa9UeOK1o=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d5:5b:b7:77:40:4a:77:46:a8:c6:d8:10:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Jun 14 06:00:53 2025 GMT
Not After : Jun 15 06:00:53 2025 GMT
Subject: CN=292242ddd648e82b53218fccd7d1f54e94ef5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:15:98:cc:4d:b5:30:9f:c0:84:a9:e9:39:
a4:db:d6:34:be:32:4f:df:10:8f:4a:ab:57:3c:8a:
45:dd:a1:44:c2:af:af:76:ea:fc:3f:bd:3c:45:be:
7a:b4:71:4d:c2:8a:9c:fb:32:dd:7a:91:f2:ae:2c:
d7:2b:1c:ea:5f:cc:c4:42:44:9b:85:c3:6f:18:f7:
ad:e6:23:a9:9d:b9:59:24:96:28:5c:de:b6:0d:15:
2a:c5:2a:3b:82:61:17:3e:47:6c:f4:88:de:a6:5c:
01:21:7d:67:11:82:13:09:b0:ba:58:f8:2a:1d:cf:
f7:2e:8c:77:8d:e5:dc:6b:e6:9f:36:be:c9:b4:3d:
d8:24:58:00:71:ff:c4:59:ef:86:b0:fc:b8:05:97:
7f:d7:f6:40:eb:ad:3d:d2:62:79:0b:52:3e:19:6c:
a5:77:dc:19:82:a5:0a:03:00:f2:ce:0b:97:bd:05:
9a:d5:07:7b:46:b1:6d:a6:dc:a1:fb:2e:da:2f:ea:
72:bb:e5:07:87:de:e8:1d:54:6a:b8:33:64:55:25:
ea:6a:b0:22:ab:53:ba:09:47:29:4c:7a:a9:ee:d0:
75:6e:89:d7:d5:29:6b:5a:5f:c0:ed:1c:18:79:e6:
45:b0:0b:82:da:a4:19:3f:59:bf:b2:e2:bd:dc:8a:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:42:DD:D6:48:E8:2B:53:21:8F:CC:D7:D1:F5:4E:94:EF:5F:B6
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e9:c0:89:f0:50:f1:40:83:c1:9a:d4:aa:7b:82:e2:8d:a9:
b3:28:1e:02:31:fd:6e:92:aa:ad:c6:28:3b:11:08:8a:e0:77:
4e:8e:26:c3:b3:57:60:42:8d:39:77:5b:f4:b6:9e:d3:23:2d:
f8:e8:de:4e:f7:a7:4d:cd:c3:39:5d:9a:c3:a5:bc:ff:84:a9:
49:cf:96:8a:02:10:5e:f5:a9:ec:3f:d8:d0:5b:3c:b0:d5:de:
b0:5e:46:15:5e:5c:bb:7c:6a:82:6e:e8:c4:a2:b7:65:d0:2f:
5b:73:81:42:64:08:8e:35:82:2b:e2:6f:37:65:97:66:af:f2:
b6:52:6f:4d:0c:7e:9e:99:bc:f1:57:27:a2:06:76:2e:d7:81:
1b:06:5b:48:f8:1f:4d:58:6d:16:4d:fa:8c:51:5a:53:a3:12:
98:0f:ac:e4:11:fa:80:7e:76:56:d9:9e:65:61:9f:32:b4:5c:
f3:e8:1c:28:7d:a9:10:9c:b0:73:72:33:0b:bb:1b:ee:69:11:
bb:b4:9b:ab:1a:fa:54:30:98:59:c9:4b:c6:97:ca:1e:fd:40:
b6:e1:46:fa:53:8e:0b:6b:67:52:91:34:11:ec:66:a1:2c:f4:
c2:32:82:0c:38:69:e5:86:ae:db:35:a7:f9:82:b2:4b:10:38:
3a:0f:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:50 2025 by rpki-client