Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: F9jutPhcYtqykSCizwpkAwv8bGsGdEbIMcIgHC7hRGY=
Subject key identifier: D0:E8:21:2C:CE:E6:8D:7C:CB:88:D3:61:42:28:22:70:84:2B:CA:6F
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 01977187F7B8F2C9A5E301154BCAC3610550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 03:00:25 +0000
Manifest this update: Sun 15 Jun 2025 03:00:25 +0000
Manifest next update: Mon 16 Jun 2025 03:00:25 +0000
Files and hashes: 1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: B5+y4yfGi+ImKYrzSYQqpQvQjkGQZpg6Dr2Q1Hi8Oek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:f7:b8:f2:c9:a5:e3:01:15:4b:ca:c3:61:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jun 15 03:00:25 2025 GMT
Not After : Jun 16 03:00:25 2025 GMT
Subject: CN=d0e8212ccee68d7ccb88d36142282270842bca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:d3:d6:c2:5c:b7:78:9d:1a:a2:77:8d:f7:
e0:e9:8a:e6:7e:bc:73:04:e2:76:98:36:a7:07:cb:
5b:bb:04:1a:56:ea:71:e1:89:c2:0c:d1:57:3d:ff:
ee:95:0e:2a:6d:77:4a:1a:9c:e2:53:b0:0f:65:7b:
fa:cf:db:e0:7e:fa:ae:73:ce:a9:39:79:cb:52:a4:
f0:4e:57:ba:e8:65:b8:55:e4:f3:63:32:c6:6e:29:
da:1d:ec:b5:39:27:b9:ca:09:32:38:3f:94:cd:e5:
78:b3:7e:92:e8:ea:40:63:a0:2e:0c:ae:7b:8d:3f:
04:2c:cc:e4:48:b5:45:f7:52:66:12:04:d6:7b:38:
c1:7b:01:d4:63:b0:bf:ea:1d:bc:bf:30:64:f8:8c:
55:bf:aa:fb:6d:8a:26:e4:4b:b7:7c:a3:65:cb:1d:
2a:87:21:59:8e:2e:91:d2:ea:ad:30:3b:9c:24:00:
35:c1:6a:d9:7a:c3:8a:a1:33:01:40:54:36:d7:cf:
d1:9b:19:d0:20:31:58:a2:60:c4:9b:47:78:ba:f6:
b7:52:96:12:1e:55:89:92:ce:cd:00:6c:07:9e:1d:
97:bd:73:86:6f:38:e5:d1:59:2e:2f:8a:65:0a:9a:
3b:45:f3:7d:a2:76:77:40:60:8a:5c:05:25:27:35:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:21:2C:CE:E6:8D:7C:CB:88:D3:61:42:28:22:70:84:2B:CA:6F
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:f7:d6:88:63:2c:e6:c2:23:41:ce:5e:ce:c1:13:b5:25:
02:63:1a:84:ca:a1:4f:2b:71:8b:66:86:5e:69:6d:2e:2f:04:
de:fc:1f:32:d2:1f:94:ea:07:73:41:28:f3:c9:9e:5d:89:fd:
da:a9:41:ac:e8:14:e2:8e:d6:ce:57:f3:4e:f4:15:5d:18:6c:
91:bb:ec:a6:50:2f:3b:f7:93:df:d5:20:05:62:ab:24:e6:09:
79:a5:57:e3:e9:f8:3c:c7:5a:25:26:03:d6:73:92:c0:95:86:
f4:30:ed:2d:b7:cb:4d:32:89:49:53:75:4d:fb:ff:08:ed:02:
2c:7b:5b:61:d8:41:ac:b9:7d:e4:58:21:8b:03:8e:ca:1f:10:
45:4c:5a:a7:2a:f4:81:c0:e4:08:8d:59:85:c8:3b:3d:ef:a5:
c9:35:76:a9:c0:5a:20:9f:66:6c:05:7f:e1:fa:45:0a:d2:30:
12:55:2c:ea:e2:64:13:2d:3d:85:cc:02:18:22:bf:5f:48:44:
cf:f8:a9:ba:44:ba:f1:18:ad:71:ef:76:a3:46:49:67:06:48:
a0:de:66:cf:0c:4e:4d:c7:79:43:42:54:5b:e8:c3:e0:59:9a:
9f:29:44:31:1c:ac:0c:c3:f4:c7:d2:f0:88:ad:3c:54:e0:34:
bd:59:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:53 2025 by rpki-client