Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: g6bNkEMJosuVd+Pys3l3ZG1oooGSh9nRQExv/LVis6k=
Subject key identifier: 10:69:58:19:EC:CB:D0:8B:AF:76:51:B6:9D:F9:2F:88:46:3B:85:AA
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 01977A1DBF7843E36C2B610B4279C0DB35E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 036E
Signing time: Mon 16 Jun 2025 19:00:59 +0000
Manifest this update: Mon 16 Jun 2025 19:00:59 +0000
Manifest next update: Tue 17 Jun 2025 19:00:59 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: k2gVC1R7bccDwGlE8w96Psc5cg8Z2xwTdyPlosgUoVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:bf:78:43:e3:6c:2b:61:0b:42:79:c0:db:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Jun 16 19:00:59 2025 GMT
Not After : Jun 17 19:00:59 2025 GMT
Subject: CN=10695819eccbd08baf7651b69df92f88463b85aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:72:2b:f0:68:54:0e:b3:ff:86:cc:41:b7:
4a:e1:c3:67:ea:e0:c1:79:33:24:6d:4c:54:3c:b7:
5e:4c:e9:39:e7:dd:71:f3:62:fa:0d:a6:74:83:60:
53:06:a4:53:22:ea:d0:73:5c:68:87:12:15:8e:af:
c0:13:69:45:0c:6f:7b:0d:7e:f8:73:20:9a:19:fd:
96:6c:c5:16:4c:9f:9e:76:ac:a4:b7:21:b6:ce:18:
d7:1f:38:f0:01:1b:ce:7b:da:7c:8c:d1:0d:78:4b:
c2:0a:81:ae:a2:46:64:de:dd:63:5d:78:cc:e4:63:
91:0c:01:31:a9:22:34:53:05:19:86:de:dc:e1:62:
44:90:58:c9:a8:02:ca:f5:73:c0:d0:f5:75:69:b7:
b0:f5:60:f5:75:80:f9:ab:a7:8d:9f:d4:32:91:b0:
9e:50:8b:c4:d9:e6:2a:8d:01:76:28:f3:ce:15:ab:
0a:92:dd:db:5e:9f:03:d6:64:ae:33:bb:57:b5:65:
45:4e:6b:c6:44:8b:49:81:89:5d:c2:a5:6a:ce:92:
8a:78:63:07:10:d2:ef:2d:81:01:e9:f3:95:fc:7e:
d2:03:8e:d2:fc:17:98:3e:b2:38:0b:de:9b:56:3a:
7f:c8:71:5e:b2:9d:93:a9:6f:84:cf:bc:4f:b1:f8:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:58:19:EC:CB:D0:8B:AF:76:51:B6:9D:F9:2F:88:46:3B:85:AA
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:7f:1e:22:82:c3:94:2b:fa:56:48:0f:5b:63:a9:9e:68:
3e:df:99:9c:f3:3d:f4:e1:29:5f:2c:5f:59:80:7c:fc:3b:56:
8a:d6:5f:1a:95:71:5c:a5:e6:b3:62:db:d0:dd:80:3e:d9:e4:
85:cb:c7:6a:3b:98:b2:37:6f:e8:16:b8:f9:dd:ab:1f:91:6a:
12:af:d7:ef:d1:7a:77:2e:ee:f0:0b:27:93:f2:d6:b6:39:b0:
ff:f7:92:e6:71:71:b2:93:31:b5:53:50:52:74:1c:9c:29:cc:
9a:58:ec:12:dc:31:5f:42:36:5c:97:ac:9e:92:e0:f1:46:e5:
19:62:11:37:48:69:ac:ef:f9:05:c8:50:fa:cf:31:81:bd:d1:
be:5b:50:68:ca:1e:83:55:ac:72:79:25:ea:b4:98:e8:a2:2a:
8a:4c:ab:34:46:c0:95:92:48:61:03:09:c5:fd:91:49:c4:2c:
e5:e8:17:8d:dc:cb:bd:80:43:fc:a1:2e:8a:4d:6e:e6:93:31:
ae:40:c1:00:52:21:56:6f:6c:53:78:de:36:94:0f:da:03:58:
b1:77:03:47:ec:f1:bc:c9:a3:96:89:84:c5:0f:5d:f2:77:fe:
a7:61:88:61:c5:02:c2:c1:67:56:b1:58:ac:8c:40:c6:fc:38:
cf:1f:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:08 2025 by rpki-client