Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: tO9K5G/IJ6mqq/EMxgnhDfwnMJjomVsrRA/C3f1GBNI=
Subject key identifier: 05:78:8B:DC:A6:09:BA:8B:00:4D:90:E5:32:44:5F:17:6C:09:4C:BB
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 01976EBE0E6DC1B94D19FD0FEACB30B4F74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 14:00:38 +0000
Manifest this update: Sat 14 Jun 2025 14:00:38 +0000
Manifest next update: Sun 15 Jun 2025 14:00:38 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: Wa9KElHJok7GLIMVSbePSbnwcExzTeriE9WThZdqBNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:0e:6d:c1:b9:4d:19:fd:0f:ea:cb:30:b4:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Jun 14 14:00:38 2025 GMT
Not After : Jun 15 14:00:38 2025 GMT
Subject: CN=05788bdca609ba8b004d90e532445f176c094cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:d2:1f:7a:97:15:37:e6:40:3b:df:b3:9f:
0c:45:31:38:75:76:e4:2e:bd:7a:2a:79:89:88:6e:
d1:f8:92:67:cf:7e:07:6b:e5:2b:c8:3e:0e:b0:69:
93:30:c8:c8:90:4f:5c:7a:ce:38:fc:d5:8d:44:c8:
76:d3:4b:10:de:3f:c0:ca:05:d2:3f:74:53:aa:69:
32:a6:6f:59:66:18:76:ee:f1:5a:2c:69:f4:f8:6a:
dc:39:cb:01:db:51:c2:09:9a:b2:83:82:b0:d3:df:
7f:88:17:56:f1:b9:4d:dd:8c:bf:32:e6:5b:c6:a5:
36:87:55:33:09:f4:c0:8e:c8:1e:cb:d1:20:0b:9b:
8e:09:c3:ab:5b:0f:08:90:ac:c9:0e:a6:d9:9c:5c:
6a:cf:60:04:62:46:6c:e6:39:7e:6f:07:ed:5d:a1:
c1:d8:15:f4:12:63:0c:ec:9a:e0:d7:cf:0b:5f:5d:
b1:87:f5:d3:46:ec:45:8c:f5:9c:d5:17:b7:ab:0f:
b1:e3:44:3d:79:85:b9:1a:68:9f:5f:42:d2:b6:bc:
25:11:8d:9c:cf:2e:7b:1f:9c:ea:3f:70:84:b6:d6:
56:9e:71:ad:43:d2:f2:a7:db:fb:f8:50:77:82:8a:
c6:d8:64:9b:cb:1c:58:0d:45:69:77:62:b5:7a:5e:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:8B:DC:A6:09:BA:8B:00:4D:90:E5:32:44:5F:17:6C:09:4C:BB
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:32:96:23:32:56:58:b5:c0:95:80:72:9e:51:ed:56:e2:
a0:04:dd:5c:4b:56:7d:bf:fa:36:88:5e:18:58:4e:d7:5d:31:
79:bc:5d:c7:aa:05:63:9e:8a:38:4f:f8:3d:9d:12:d6:62:b7:
4e:2b:f2:84:10:d4:ca:e1:0b:58:cb:4d:5c:a6:a6:19:61:64:
e4:49:1d:4e:cc:4c:e0:3a:1f:1a:21:ac:44:6e:81:14:21:71:
0c:59:b9:29:38:58:c7:db:d3:86:96:89:2b:1b:7f:18:64:c7:
f5:1f:dc:72:2c:fc:d8:68:b9:57:bd:51:3f:06:6c:b0:b9:be:
fa:74:df:48:d5:dd:d6:df:4d:5e:f0:f2:03:7c:3c:ce:12:a8:
01:9e:c3:61:cf:c1:f6:1f:cb:8e:95:e0:07:2a:1e:f1:87:d9:
55:4e:b8:7a:1a:f6:9b:42:a9:2f:77:f6:c3:b5:8b:57:d2:7f:
06:fb:4f:f1:41:55:24:cc:09:98:03:7e:4c:d1:fa:ba:ae:c7:
11:78:51:b0:2d:a1:6e:0b:9d:53:a4:02:73:22:75:2c:8b:83:
da:17:54:54:0b:06:0e:2a:1a:80:27:96:00:86:61:1a:31:7b:
4b:b9:57:a9:ba:7d:b6:55:30:5f:f7:e4:a9:f8:10:d1:f7:4c:
6c:f0:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:36:48 2025 by rpki-client