Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: 6O3LFFfyOSQKWMsv+AIbRiiFct7QadsuG+uRPV6NRug=
Subject key identifier: 95:B6:E0:6C:B3:30:50:D8:99:5D:85:2B:9F:FD:20:D8:11:43:43:10
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 019771BFA14AC6D801660D62CF91EC348E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 04:01:13 +0000
Manifest this update: Sun 15 Jun 2025 04:01:13 +0000
Manifest next update: Mon 16 Jun 2025 04:01:13 +0000
Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: 9noPIRmnByF/ee+E7ecjCxkDHGH5OSBBcUU3Fpn5uDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:a1:4a:c6:d8:01:66:0d:62:cf:91:ec:34:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Jun 15 04:01:13 2025 GMT
Not After : Jun 16 04:01:13 2025 GMT
Subject: CN=95b6e06cb33050d8995d852b9ffd20d811434310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:89:45:bb:64:ff:c7:b3:1a:5d:b5:59:83:
ac:88:58:7c:5d:f6:56:13:84:64:aa:5f:02:a0:16:
a8:8b:21:0b:69:b2:76:cd:69:50:b0:9c:6e:6d:39:
b7:5a:88:45:0e:5a:71:bb:fa:42:46:f9:3d:2c:e1:
d5:50:67:30:ae:21:7e:af:cb:35:d6:3e:2a:6f:db:
d8:5d:cd:5f:6d:fb:de:58:56:41:8b:b9:75:d9:10:
cc:55:8b:f7:0f:ba:22:23:47:f5:13:5d:5c:9c:85:
df:1e:e2:33:ab:e0:9b:d0:b7:ba:35:ab:76:36:46:
b9:5a:cf:23:a0:7a:45:f7:80:17:ea:69:82:fa:9d:
4b:a1:cf:ff:45:b0:0b:3f:39:0d:21:62:8b:b4:a6:
1d:ec:98:8d:d6:08:98:23:35:26:ab:d4:94:75:9f:
35:84:8a:53:95:30:b6:1f:e5:14:c5:9a:9d:5b:8c:
ec:b9:05:57:70:4f:36:ff:93:17:b1:b5:a8:72:de:
64:75:86:5f:b4:43:0b:5a:29:53:d7:45:43:c1:47:
88:f1:cf:4c:db:4b:d9:ba:4e:6d:e5:8d:3b:43:8c:
f9:5c:74:04:bc:0a:fe:bd:2b:d5:5d:14:88:0c:4d:
e8:bf:fc:ba:42:9a:76:cb:9c:77:4d:5f:21:fb:f2:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:E0:6C:B3:30:50:D8:99:5D:85:2B:9F:FD:20:D8:11:43:43:10
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:91:2e:58:5c:e4:77:8d:5e:21:e9:9e:f8:6a:96:e2:0e:7c:
cd:f7:5a:e0:66:49:2f:e8:4d:35:61:df:69:53:85:d3:4d:fe:
3e:81:81:39:89:5f:41:b3:4f:17:7e:98:e9:7b:04:e1:b3:dd:
e1:92:a1:25:e4:f8:04:68:b8:e8:70:bc:56:34:f8:42:ec:2a:
b2:7e:43:ff:74:e5:6a:27:47:5a:9e:a5:47:9b:fc:a3:b9:34:
19:6e:eb:07:fa:97:39:5e:3b:b9:fc:b4:d1:37:ce:cb:1f:40:
e3:11:3c:37:e3:24:6a:63:62:7e:f5:76:fd:d0:42:7a:37:34:
42:50:07:65:e6:54:2b:52:65:f9:c8:17:db:18:94:2d:8a:da:
88:92:49:57:b7:67:ae:7d:17:eb:d6:3a:35:96:31:d9:69:67:
7f:22:1f:55:b5:a7:38:a2:b7:e0:07:32:e7:0b:60:87:94:fc:
a2:08:04:0b:e3:3e:ac:94:9b:d1:78:5a:0d:99:6e:2d:09:4c:
c3:b0:01:00:19:99:fc:f6:b8:f2:4b:73:40:69:26:74:ed:f5:
bb:be:48:19:d2:55:c8:2a:65:56:13:e2:ad:f5:45:1f:3e:46:
37:8c:4c:44:05:b5:59:73:27:c5:7d:23:72:05:20:5d:70:1e:
56:17:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:23:11 2025 by rpki-client