Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: 4VAfQY6uDsoGx3xfGQk0giAjEPBWQnpqUytszWx+TRg=
Subject key identifier: 46:A5:E1:BB:82:3C:D7:90:D8:C7:A4:2A:86:85:42:49:67:AF:E8:B0
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01976F99CD0AF11B5F192F190FD2FC2499FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 15A0
Signing time: Sat 14 Jun 2025 18:00:39 +0000
Manifest this update: Sat 14 Jun 2025 18:00:39 +0000
Manifest next update: Sun 15 Jun 2025 18:00:39 +0000
Files and hashes: 1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=)
2: 9Q1xAgRNiLot3-j54o5iFnxnl4s.roa (hash: AzmmRL1ZS8f2sEp5vFxgu0dw+ympnZshyg3/a0ND1H8=)
3: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=)
4: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=)
5: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: MwRdmuql3jXNyWPeoKI/s0WLSmuWp5P2HyJ1CFjDYaE=)
7: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=)
8: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:cd:0a:f1:1b:5f:19:2f:19:0f:d2:fc:24:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jun 14 18:00:39 2025 GMT
Not After : Jun 15 18:00:39 2025 GMT
Subject: CN=46a5e1bb823cd790d8c7a42a8685424967afe8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:06:a4:68:4a:68:e8:c4:80:ce:3f:75:6b:
79:c4:5c:d2:57:82:85:22:00:3a:7d:b2:2b:6a:98:
c7:36:d4:1a:c4:5e:4c:b0:bc:ad:4d:d9:64:11:a0:
01:f5:b9:06:63:83:3e:4f:6d:1e:49:0e:99:da:e8:
e1:1f:1c:db:20:76:89:21:02:fe:b9:55:09:ae:45:
c0:a6:0d:dd:72:1b:23:3e:6f:d0:4f:c2:9f:45:5a:
c9:53:34:08:7b:c4:45:f9:48:26:df:21:53:19:e1:
ed:64:91:8d:33:5f:26:fb:a9:f4:9e:7a:c7:36:67:
82:6a:c1:aa:df:f5:c8:3a:c6:02:45:65:82:b1:e4:
88:b5:b4:37:ba:95:9f:08:2a:b2:34:45:7f:8d:35:
52:d0:f6:7d:b5:c5:cb:e2:9b:15:36:52:85:41:ed:
bd:3a:de:ee:ba:71:05:f5:3c:53:33:1b:c2:d0:f8:
d5:38:36:00:61:3f:87:4b:ed:28:bf:b6:c2:9d:dc:
74:b1:78:5d:b6:30:47:79:4d:00:66:a8:f6:b9:0c:
52:98:b2:3c:6e:be:fe:4a:93:f6:e4:c8:5a:65:db:
f1:4a:ed:e9:24:e1:08:09:78:54:6c:cf:52:ae:a0:
75:a3:46:08:db:42:a2:bf:d4:ad:47:46:f3:1e:24:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:E1:BB:82:3C:D7:90:D8:C7:A4:2A:86:85:42:49:67:AF:E8:B0
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:a2:7c:0f:ab:05:2a:ea:89:f6:63:80:68:cd:78:93:80:
17:a6:1c:55:46:e6:1a:70:c0:76:a5:e1:a6:b7:68:ac:1f:d9:
0c:96:67:c7:2c:db:b4:2b:ad:21:cb:2c:d8:ba:36:a5:4b:75:
77:e0:26:b9:f1:66:cc:55:e6:b7:12:72:2c:03:fa:ef:7d:33:
12:24:18:89:ce:06:ce:58:72:d4:14:16:b8:1b:d5:52:b3:0a:
09:cb:fd:c2:d8:ae:19:92:b0:d1:3d:11:c9:30:d6:4a:c1:0c:
67:39:53:fc:d5:cb:ed:20:00:7e:28:0f:7b:6f:21:ff:16:92:
19:1e:94:81:63:43:9d:2e:87:f9:f4:03:1e:4d:b1:19:53:71:
b9:15:d1:34:ed:ec:d0:58:68:80:f0:0c:03:40:33:92:e2:2b:
98:0a:58:34:1b:d4:3d:57:26:ff:ad:e5:c0:7e:8d:21:ff:60:
0b:54:9e:34:7c:2b:f7:13:02:76:e3:a1:7f:6f:13:e1:47:fa:
2d:e0:72:d1:99:c1:7d:ec:a6:4c:4f:a9:48:c7:39:09:be:cb:
11:c6:78:b1:8f:19:4e:85:fd:0f:22:e5:59:a2:6e:88:5f:6e:
00:76:85:68:7e:eb:7d:f6:e0:cb:47:7f:b2:d1:d2:06:31:4f:
07:ed:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:49:23 2025 by rpki-client