Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: FYwW/SZTtBpwKQAGyfDDxUbYrnnemRpI9DLG8aoArOU=
Subject key identifier: 87:FF:9C:B2:36:B3:A6:47:87:C2:90:3E:E9:FB:1C:8A:6C:54:4E:AE
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019771884CE72D9478ADB73301E7DDE76BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1334
Signing time: Sun 15 Jun 2025 03:00:47 +0000
Manifest this update: Sun 15 Jun 2025 03:00:47 +0000
Manifest next update: Mon 16 Jun 2025 03:00:47 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: yYCeJwnJJpsOhqSaapOSz6/3IjBBUPR2T+ep7Q4AgZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:4c:e7:2d:94:78:ad:b7:33:01:e7:dd:e7:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 15 03:00:47 2025 GMT
Not After : Jun 16 03:00:47 2025 GMT
Subject: CN=87ff9cb236b3a64787c2903ee9fb1c8a6c544eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:e8:7b:7b:99:0e:04:aa:37:92:fc:6a:29:
2a:31:6f:6e:9f:8a:c3:c0:42:e8:f7:dc:70:56:c7:
36:17:15:a2:16:a8:c6:58:ce:4e:a3:e9:26:27:54:
47:c9:03:5e:a0:59:46:c6:4f:6e:08:03:57:c7:ae:
ba:a6:4a:10:ec:0f:12:13:52:96:54:6a:20:6a:7c:
4e:bc:71:e6:cb:ea:ea:f2:15:ea:62:a2:f1:01:dc:
d1:67:f3:08:3c:f8:0b:e3:bd:46:e8:c2:be:b8:da:
ed:c0:96:19:97:c7:5e:c8:81:91:52:ea:65:ef:6d:
0c:79:21:fc:af:84:5f:0e:e1:d1:e9:7e:2c:2a:58:
56:96:9a:c6:a9:4b:7a:19:3c:d1:89:30:48:94:87:
35:fb:4e:c9:28:19:8a:5c:b5:63:17:1f:ee:03:1a:
95:f9:ec:f0:6e:8e:3d:f9:74:a2:81:b2:34:ff:e5:
06:03:e8:c7:9c:01:ee:8f:79:bd:4e:7e:9c:9b:eb:
04:b8:80:de:d6:27:59:ef:76:43:04:d9:89:38:72:
85:b8:be:dc:f7:82:4b:01:39:26:11:78:e6:10:7e:
7b:ca:55:22:7f:5b:33:d0:8e:59:d1:06:65:60:d6:
d9:e1:bd:00:c2:d7:13:50:aa:ab:f9:c3:51:79:3e:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:9C:B2:36:B3:A6:47:87:C2:90:3E:E9:FB:1C:8A:6C:54:4E:AE
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:54:f5:73:9c:32:61:d7:f3:6e:d8:1a:1f:d3:52:f1:6f:
69:a7:6f:9f:90:8c:ce:9d:e5:3f:68:b6:92:82:97:df:33:2a:
f7:1d:f3:ad:61:74:1d:24:9c:b5:71:37:53:3c:94:1f:57:fa:
d4:91:0c:87:b8:fd:7e:19:a0:40:d2:51:9d:2c:29:31:f2:bd:
6a:3b:e7:9e:b4:0a:99:ec:cd:01:6b:73:cb:56:71:ec:4e:14:
7e:2f:76:4a:69:d4:d9:6c:75:6c:4d:35:27:d0:4f:cd:d8:6d:
a3:b6:37:40:cd:8a:5f:6d:5d:35:c7:32:c8:a2:f5:84:52:35:
2f:2d:27:e4:59:34:89:e3:a4:f5:34:59:1e:73:5f:4e:a0:df:
f2:94:27:7d:79:11:47:44:ef:5e:69:da:5a:0c:3e:7c:25:f9:
86:60:b9:60:e6:97:63:0d:49:d3:35:78:f9:4b:c1:c8:ba:a0:
e8:a1:f7:3d:74:68:8b:67:b6:65:11:4f:09:b5:73:c4:ad:0b:
62:67:2f:04:10:ed:93:61:7c:05:8a:21:bc:5a:af:49:fc:db:
fe:a4:c1:ff:9f:ef:6a:52:3b:b8:6e:5a:28:e8:38:89:66:23:
02:da:57:46:08:53:63:93:bf:e4:c1:ce:d4:dd:8c:46:d5:45:
bf:d8:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:19 2025 by rpki-client