Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 8JNV9sVDRWssTDA/z8sNH4x5PHt+k0gc7tg4GdQmm1o=
Subject key identifier: 28:23:92:EA:B9:2E:F9:C5:3B:B2:3A:20:08:6F:CF:5C:38:BA:4F:1A
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01976C2B3B55F925E3C3DD3A503604CF6E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 146E
Signing time: Sat 14 Jun 2025 02:01:01 +0000
Manifest this update: Sat 14 Jun 2025 02:01:01 +0000
Manifest next update: Sun 15 Jun 2025 02:01:01 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: YiHIkU4YrVHa2Pidd504Wu4xFJ7dnIAsyGwfAoZXUY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3b:55:f9:25:e3:c3:dd:3a:50:36:04:cf:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jun 14 02:01:01 2025 GMT
Not After : Jun 15 02:01:01 2025 GMT
Subject: CN=282392eab92ef9c53bb23a20086fcf5c38ba4f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:30:be:7b:4b:03:b4:ee:b0:12:8f:a3:b8:
1c:75:b1:31:45:16:e8:e3:cc:32:27:e2:45:f1:f2:
23:cb:15:56:3a:c2:9d:73:69:7b:e0:61:38:cb:e9:
f9:34:91:b3:fd:3e:60:5d:80:21:e8:c6:ba:d4:5c:
57:db:89:cd:e9:3f:85:2b:15:06:c1:34:ab:08:90:
48:c5:05:46:14:da:37:85:81:21:65:79:55:79:d9:
c4:bc:0e:57:ef:12:bc:5a:e8:2c:d9:52:32:4d:5b:
91:b2:7b:ff:64:92:9b:da:42:1a:ce:44:e1:6f:45:
54:c0:8d:a0:5a:f2:bc:93:25:9a:76:c0:47:4f:3d:
02:73:5a:00:25:b4:0d:23:5f:e0:9f:c7:5e:82:1b:
6a:4f:89:91:7f:3d:5b:01:d3:bd:86:d0:1f:20:16:
70:c7:50:52:36:d9:27:33:98:72:f2:d2:f0:f8:e1:
ad:c4:9e:a5:0c:5f:72:7b:b2:b3:46:42:17:31:32:
c2:1b:12:f9:e2:44:ae:cc:08:fe:64:bd:6f:29:68:
ad:b1:a0:19:28:d3:e5:a2:5c:7e:bb:59:b1:e0:b3:
f1:ea:ca:e3:4f:fb:33:de:2f:50:1c:5e:e1:46:f5:
65:d5:89:de:d7:3e:85:83:ef:41:5a:60:b0:6e:83:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:23:92:EA:B9:2E:F9:C5:3B:B2:3A:20:08:6F:CF:5C:38:BA:4F:1A
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:04:db:47:fa:d8:95:56:16:34:2f:88:f1:80:a0:a7:4a:
22:1b:57:1e:3e:35:53:1b:96:a7:51:89:1f:1a:65:e6:b3:8a:
e7:25:67:ff:d3:c0:36:cc:f9:12:2d:b0:2c:e9:04:61:96:19:
95:c8:d1:af:48:6a:ce:e3:82:11:ac:8b:b1:07:63:ea:f6:ca:
74:be:1a:20:05:66:ce:23:30:03:7a:9a:82:32:bd:d8:52:e3:
0b:87:44:bf:3b:59:d1:05:da:36:5e:c4:be:7c:f6:4b:71:bb:
23:4b:7b:47:03:79:e8:ea:1f:39:6a:13:90:fa:24:de:11:bd:
e1:73:46:74:37:b3:d2:92:b7:29:b6:f8:15:a5:d2:bb:a4:07:
02:b5:ec:e4:3f:84:8a:fd:2d:97:81:b3:8f:a8:fc:5b:46:d3:
2a:89:19:cd:7c:bc:20:50:a2:e5:bc:95:07:49:79:62:de:65:
ef:24:ae:fd:69:78:d6:11:37:98:22:a4:0c:99:9c:b2:c6:86:
d1:ae:50:fc:3f:0a:59:f7:96:ec:4b:d1:bf:d7:bb:96:9e:9b:
8d:d5:c7:bc:9c:24:3b:ad:98:21:75:9a:0f:ab:ac:21:80:0a:
c8:40:73:22:a5:fe:ca:66:e6:f3:0d:5b:b8:b4:f9:54:45:63:
05:bf:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:55:13 2025 by rpki-client