Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: hk4KE7ooIp5G+0n3OL/poLok++Hn/ukqzy7viKwHYQY=
Subject key identifier: C9:46:92:1A:CC:5E:38:F0:6B:3C:B9:51:E2:0E:C8:A4:18:6A:53:9E
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01976FD136F02B7494B20D1D58FD1BF426DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 19:01:11 +0000
Manifest this update: Sat 14 Jun 2025 19:01:11 +0000
Manifest next update: Sun 15 Jun 2025 19:01:11 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: uMok6x1qe7eVz5dG3qFN6mMMVkrDiZF4LCNocreXdgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:36:f0:2b:74:94:b2:0d:1d:58:fd:1b:f4:26:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jun 14 19:01:11 2025 GMT
Not After : Jun 15 19:01:11 2025 GMT
Subject: CN=c946921acc5e38f06b3cb951e20ec8a4186a539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:30:99:6e:ac:10:75:cf:c9:fc:f8:df:eb:
39:40:3b:1a:be:b7:06:15:8f:62:3a:da:f9:99:9f:
92:a9:b0:79:f0:04:01:4f:f6:55:15:73:96:01:09:
b2:bb:9c:30:85:11:00:11:fb:8e:29:f4:91:e9:8c:
51:d6:1f:9d:fc:e7:fb:28:51:43:12:50:45:e9:55:
2a:03:f4:46:07:5d:82:30:35:01:53:2d:80:62:88:
b8:2b:3a:07:e9:96:a7:d1:6c:26:03:25:17:61:56:
3a:b6:89:14:ed:2f:47:d1:61:be:87:9d:1a:0c:e2:
6f:34:e7:f5:1b:0e:e9:af:72:99:96:08:9c:92:d3:
cc:a6:58:13:a9:2c:8b:31:9f:e5:75:78:9f:be:b2:
aa:d9:90:26:14:a2:7b:4e:51:d6:77:ae:c1:16:e3:
7b:da:ac:54:9b:51:65:be:40:7d:8d:78:1a:23:2d:
e2:65:54:2a:b1:24:87:08:15:3b:3d:57:b5:7d:92:
15:e1:ae:29:10:51:57:d5:37:73:e0:da:02:2c:1d:
11:6f:25:45:9b:f4:93:73:6b:02:1d:29:9d:35:46:
b4:f9:a0:28:6b:04:a6:36:c1:11:25:19:9c:ea:31:
45:20:88:bf:18:06:07:1b:6d:ca:fa:22:12:46:2f:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:92:1A:CC:5E:38:F0:6B:3C:B9:51:E2:0E:C8:A4:18:6A:53:9E
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:c4:14:e0:a8:58:e4:a2:28:a1:03:90:c9:ef:00:00:06:
6d:2f:9f:3d:a7:0e:0e:41:ab:ab:bd:72:cc:7a:19:b6:44:3a:
4c:f6:23:45:51:fe:bc:81:21:b6:f2:89:36:f3:79:25:4e:97:
b7:07:ae:38:b2:50:4c:23:7b:7f:a4:2a:ae:c4:73:d8:53:ed:
7c:6d:5c:a4:4a:8e:90:a7:80:67:38:0b:78:9a:14:c4:53:1f:
25:10:9a:f6:bc:97:8e:0c:f0:9b:b2:f4:f2:95:c4:ca:1e:3c:
c9:69:ca:79:67:d1:22:5e:d6:a7:17:d7:5a:78:f7:8e:93:f3:
d1:7f:8a:49:79:e7:39:05:fa:bd:9b:4d:9e:23:cb:b8:9d:c8:
46:2b:f9:f6:fd:3e:7c:1a:f0:0b:c7:a5:53:2c:ef:34:9f:a9:
b1:29:79:ee:f1:96:74:b6:04:86:1b:6c:cb:13:a7:6d:c3:c5:
39:0a:92:91:f1:6a:2d:1e:2e:a1:08:08:fc:a3:6d:43:99:c2:
fa:3c:28:82:a1:f3:d9:be:49:50:ce:f2:a4:67:19:96:f0:3b:
70:41:4c:00:d3:77:3a:4e:c2:2e:36:9b:2b:65:94:ed:b4:6e:
07:76:22:3f:be:9b:df:53:cd:df:ab:52:85:5e:6b:ce:c2:11:
e6:e7:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:50:59 2025 by rpki-client