Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: 1Gz61aJca4USINLx3t72UiEH9uwgPeswNq2sRLSePno=
Subject key identifier: D6:13:2B:29:91:EB:41:14:14:FC:99:6D:B4:9F:96:88:E9:A1:3C:38
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 0197718817527E56CAC25DBAEA765D2DB19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 13D9
Signing time: Sun 15 Jun 2025 03:00:33 +0000
Manifest this update: Sun 15 Jun 2025 03:00:33 +0000
Manifest next update: Mon 16 Jun 2025 03:00:33 +0000
Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: xMnswKYAXHSXVuFQgY8zwfwqop8O2n6ruP3g4mbOnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:17:52:7e:56:ca:c2:5d:ba:ea:76:5d:2d:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jun 15 03:00:33 2025 GMT
Not After : Jun 16 03:00:33 2025 GMT
Subject: CN=d6132b2991eb411414fc996db49f9688e9a13c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:9c:59:55:f1:93:af:a1:93:a4:c1:85:f7:
c9:9d:45:8b:e2:0a:6c:3b:e7:e6:06:5b:4f:d6:df:
1b:79:39:2e:a4:ab:3b:04:80:cc:60:1d:24:5c:f3:
79:bf:0e:a0:38:85:85:4b:20:67:90:c4:c3:d6:7a:
57:d6:54:dd:21:87:63:2e:58:ec:86:0e:28:4b:9a:
c9:d5:00:2c:5a:1c:d1:41:7f:00:d2:5b:5a:2d:c1:
90:33:88:99:4b:1c:37:9a:e2:38:25:2e:55:bb:7c:
c0:5b:69:3e:a5:8a:13:e9:10:5f:24:4e:86:96:e1:
2a:8a:02:0d:3f:a0:79:22:35:ed:ea:32:17:c9:3f:
e0:d8:ce:ac:68:2b:94:eb:da:ac:d8:fd:a5:d0:a6:
92:c2:05:8f:d7:fc:7a:d9:93:f6:85:a2:09:21:79:
53:91:c7:1a:46:36:70:03:39:64:83:ab:2c:da:ab:
01:cc:86:11:1f:1f:94:8f:65:61:06:01:c1:56:13:
2e:03:0b:4a:8b:79:39:40:d5:fc:40:c4:9b:09:b7:
8e:32:33:9f:a9:d2:12:f4:cf:b9:ed:9c:fa:38:dc:
cd:82:34:f5:ec:9e:5b:93:95:68:19:a8:34:55:21:
ef:b0:c1:74:c2:10:4e:00:38:6f:ff:d1:85:8a:b8:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:2B:29:91:EB:41:14:14:FC:99:6D:B4:9F:96:88:E9:A1:3C:38
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:9e:f4:c4:3d:1d:9e:ab:5a:c6:f9:5d:14:af:c9:bf:2c:
b1:9a:1d:be:ab:77:ec:b9:b1:38:f6:de:36:1e:df:59:f3:53:
77:37:83:5d:d8:2c:88:21:0c:a6:2b:5a:b5:0b:11:20:9f:f8:
66:46:c4:10:90:03:ba:d3:7e:38:68:b1:9c:af:b3:ed:4c:40:
f3:3d:86:60:59:8d:64:3e:fb:e6:93:54:42:f4:01:fd:42:78:
38:75:23:56:fb:e6:b0:1b:12:49:3b:05:fa:4f:ec:3d:8d:2e:
3d:75:4f:38:b1:9c:ec:a6:a8:2a:fc:66:f5:e9:11:24:08:b1:
2e:e3:17:9f:fa:10:72:f9:48:4d:67:71:1f:e3:91:e3:bd:90:
fa:bf:0a:0a:5d:90:e5:eb:82:b1:77:7a:8b:58:41:de:a3:1c:
22:fb:1f:1b:e1:f2:e0:71:16:a5:63:7f:0d:ea:69:c1:3b:03:
e0:25:7e:eb:de:45:61:dd:8b:d5:12:9f:1c:e1:4a:13:9c:b4:
81:ec:56:32:5d:df:42:df:8f:fa:ef:69:1f:65:d6:19:7b:3c:
28:21:d6:99:56:6f:bc:e4:95:60:b0:d4:e0:cf:21:00:7a:0d:
74:a0:9d:81:ed:e9:29:84:55:5e:7a:86:d9:15:4d:34:de:0f:
8e:58:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:29:16 2025 by rpki-client