Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: 1RqufdZ5xEiLl7Vbyy1apke+/1vS4KKPxaggC4Cp788=
Subject key identifier: 31:AB:C4:54:31:FE:7F:98:E1:4B:9E:B7:6F:B3:57:9D:76:67:41:42
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 01976D74A550F297452148C1FB8841BC0C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0CA9
Signing time: Sat 14 Jun 2025 08:00:50 +0000
Manifest this update: Sat 14 Jun 2025 08:00:50 +0000
Manifest next update: Sun 15 Jun 2025 08:00:50 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: VPtkXDw1BbAzT0iWsbY4QbvZm2aH9316qE4Y17zgbiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:a5:50:f2:97:45:21:48:c1:fb:88:41:bc:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Jun 14 08:00:50 2025 GMT
Not After : Jun 15 08:00:50 2025 GMT
Subject: CN=31abc45431fe7f98e14b9eb76fb3579d76674142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:0c:4e:57:c6:a5:8b:99:f3:9a:7a:0b:59:
30:f8:b9:71:ab:dd:83:97:03:a4:84:cd:9c:e9:f2:
21:e6:95:80:7b:15:66:e9:ce:15:d4:bd:70:c5:4e:
07:db:ae:14:07:7a:1f:3b:ce:46:d4:0c:f2:7c:23:
c2:25:1b:7c:33:e1:61:8b:28:67:2c:75:b4:3b:4e:
cc:3e:6b:13:01:2e:f1:f4:28:2d:64:47:f6:f6:6f:
47:b1:71:22:a1:c8:a9:7d:d3:28:ae:ac:ee:6c:22:
ad:db:35:3c:5e:1a:d5:f2:d3:fc:88:d2:f9:93:7c:
4b:8f:12:dc:75:dc:aa:03:48:73:02:08:bf:74:b4:
b7:36:82:55:ed:55:a9:df:eb:62:9d:72:27:11:a9:
1a:72:3a:98:bc:67:27:db:a1:9e:02:ee:33:6f:f4:
e8:fb:c1:8e:99:ce:72:c6:43:bb:95:1f:90:19:35:
a3:30:59:5c:cf:21:f3:a3:b0:01:70:39:0d:14:de:
ee:29:05:13:9d:e6:52:27:f9:a8:8c:7c:c1:a1:60:
8f:c1:da:4b:1c:69:13:e2:ff:c9:9b:97:cc:3a:8a:
3d:27:85:f5:d9:09:0e:e5:b5:90:07:06:61:fb:d3:
86:d1:3a:02:bc:c4:67:b0:22:f1:f8:ee:e4:08:54:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:C4:54:31:FE:7F:98:E1:4B:9E:B7:6F:B3:57:9D:76:67:41:42
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9c:11:a6:c7:35:5e:9b:43:6d:c3:5c:5b:7f:5a:75:8e:86:
26:c7:d4:4a:13:1c:43:18:1b:af:a7:92:87:00:f9:b9:7e:46:
ce:ca:b0:65:3e:17:fd:81:70:50:f3:5a:e0:56:56:b5:2f:f2:
d2:df:7c:38:af:4c:98:17:af:60:d9:07:86:95:0e:f9:48:f5:
69:d5:1c:44:54:25:ac:d0:bc:ad:cf:32:a9:85:c8:5f:e5:90:
30:35:58:2f:d1:43:97:18:82:32:0e:82:76:a9:51:d3:21:b2:
e8:e4:f5:ed:15:54:1a:ca:3e:df:ff:f2:ea:6a:4c:45:e7:1b:
7d:45:82:fc:0a:2e:46:67:c4:12:0f:13:e4:3d:b3:f2:eb:e8:
21:e6:d9:b4:db:29:d2:9a:0e:86:4a:c8:5f:cb:e9:51:6e:52:
bb:b2:18:d5:ec:5e:39:23:94:86:49:54:85:3c:e0:07:3b:e8:
45:52:f1:a3:69:28:87:69:72:3d:f9:b1:93:b2:6b:f6:ed:f5:
0d:37:dc:93:93:67:ba:f6:b7:4b:80:28:14:c8:54:1c:a6:41:
7a:2d:5e:0b:78:58:95:a7:e3:36:93:fd:05:02:fb:68:27:5a:
c6:7d:f3:01:ca:74:4d:00:71:f4:9c:4d:87:8e:bb:0e:45:fc:
72:6f:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:34 2025 by rpki-client