Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: jXJbds7VNSutkD2x/H5i3dxBlCRjnefQO0VTb4x595w=
Subject key identifier: 43:55:6E:3F:7B:D3:D4:B8:57:BC:D1:76:37:2C:9A:80:5B:7D:19:91
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 0197868F478212CE974FD70DC0A500A504F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 15A5
Signing time: Thu 19 Jun 2025 05:00:26 +0000
Manifest this update: Thu 19 Jun 2025 05:00:26 +0000
Manifest next update: Fri 20 Jun 2025 05:00:26 +0000
Files and hashes: 1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: dD/xhMRddKpoy4ABup4cILeuwHf/8YDYgzSfR6T9LRA=)
7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:47:82:12:ce:97:4f:d7:0d:c0:a5:00:a5:04:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jun 19 05:00:26 2025 GMT
Not After : Jun 20 05:00:26 2025 GMT
Subject: CN=43556e3f7bd3d4b857bcd176372c9a805b7d1991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:76:ec:ee:51:70:3f:b2:c7:7f:4a:38:d4:
38:c6:a3:37:60:96:82:47:2b:9b:ab:c2:a0:cc:e4:
66:cb:be:63:f8:0c:f6:5c:24:93:77:37:f1:44:63:
eb:ae:9c:82:a2:a5:be:71:2c:10:13:4d:57:1f:0a:
15:60:b1:c9:fe:ac:16:3d:14:6e:c4:0f:03:75:f4:
2f:db:16:77:53:f3:21:dc:27:a3:a0:fc:c2:87:9a:
20:d8:ed:bb:ae:cc:6b:f7:69:e3:a0:be:aa:94:a5:
e0:3b:f2:7f:f0:9e:93:15:fd:06:c8:50:b2:fa:8c:
27:62:91:d4:a8:46:12:e0:60:7c:45:c5:5e:75:43:
02:8d:3e:9c:5c:4e:9b:21:a2:29:03:35:86:6e:f1:
05:80:85:1e:9b:70:fd:fb:f7:8e:61:74:a6:92:0a:
9e:3d:fd:54:ad:bc:6f:b5:48:cc:6e:b6:13:b7:76:
5a:68:32:1b:8d:c7:c9:96:de:45:cf:44:b4:e2:e3:
f8:0e:8c:7e:be:dc:22:04:67:c6:3e:19:ff:8c:00:
82:7c:69:83:99:e6:3d:1c:ec:1f:74:88:ea:44:ea:
46:25:6a:34:55:85:f4:54:09:ca:79:ed:6b:20:a1:
d9:1e:22:d6:ae:61:4d:bb:18:77:c7:d8:33:8c:30:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:6E:3F:7B:D3:D4:B8:57:BC:D1:76:37:2C:9A:80:5B:7D:19:91
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:f9:8a:c0:d8:70:2f:2a:b7:10:d7:a6:fa:15:9c:a4:66:
31:11:9c:11:27:e9:e4:83:c1:a2:12:37:d5:31:6a:65:9b:cf:
ad:16:17:73:8d:c7:e5:35:20:2b:cc:53:da:10:2d:34:22:15:
58:60:88:62:62:e0:27:4a:b5:bd:95:b8:f1:f6:1c:6b:a6:ed:
6f:6c:f6:db:eb:b7:3a:f4:b7:3d:0b:70:d0:77:2d:dc:6d:c6:
3a:e7:bc:a9:d5:9a:c0:24:f4:80:d4:a6:cc:8f:a8:24:43:56:
a3:b6:98:fe:25:52:3d:c9:a7:0b:28:80:f3:b1:ea:ac:4a:2f:
b3:dc:dd:54:45:20:a4:51:1d:26:8e:9e:5d:e4:04:e7:5c:68:
11:8f:dd:e8:2e:d6:eb:10:19:16:36:66:a0:2f:f0:37:2a:4f:
5c:8f:29:8e:ec:36:60:81:1e:ba:e1:e1:74:02:c8:16:d6:e0:
a2:4b:43:9e:4e:cd:76:47:5d:c7:cf:40:1c:9a:a7:fe:69:bf:
b7:b7:f8:cd:df:11:b6:42:71:37:5a:d9:a9:c8:91:c1:cb:1d:
d5:f2:21:47:cf:9a:5f:de:97:13:0d:67:d2:b1:66:02:91:ed:
ec:5f:84:d9:d5:c2:d0:ab:10:59:81:3a:3d:18:dc:c6:8c:06:
62:ef:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:25:39 2025 by rpki-client