Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: 61Ff4oArnnXorJqssaTPxhj9R/km+6inlVWvljoyXwM=
Subject key identifier: 46:57:78:AD:02:47:7E:50:8D:1F:3C:33:87:73:59:6F:DA:57:39:97
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 01976BF4A487F892A58B72CA330505024EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 04C2
Signing time: Sat 14 Jun 2025 01:01:24 +0000
Manifest this update: Sat 14 Jun 2025 01:01:24 +0000
Manifest next update: Sun 15 Jun 2025 01:01:24 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: j9r6y3aLySUrYCSW3vjOC5PCQv4myprP8AKWEjjhoNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a4:87:f8:92:a5:8b:72:ca:33:05:05:02:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jun 14 01:01:24 2025 GMT
Not After : Jun 15 01:01:24 2025 GMT
Subject: CN=465778ad02477e508d1f3c338773596fda573997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:ca:90:04:3e:b9:c4:64:93:93:68:5e:0f:
f3:b0:dd:8a:4e:b1:d5:b6:70:94:b2:d6:b7:de:30:
4a:d9:70:cc:78:a6:9c:89:72:c6:83:42:39:69:d1:
10:96:42:3e:cb:e4:4d:5d:bc:42:ec:42:73:c5:e2:
8b:cd:4e:51:a6:26:c6:6f:2d:33:55:e0:79:af:da:
74:b9:11:37:61:05:e2:67:b9:42:bf:9f:84:63:91:
ab:f7:16:ae:52:87:7d:f1:72:41:50:b5:45:ca:69:
65:10:5e:73:63:60:dd:ba:03:7e:fa:c7:4c:8b:22:
1d:a8:4b:9d:78:49:1c:0e:b2:75:a5:ff:5b:d7:5b:
dd:2f:43:ae:90:7d:74:e3:ed:9a:c9:34:15:85:04:
45:1d:3b:19:3e:36:c9:9a:34:48:86:26:8d:33:56:
4a:fd:a8:ee:d8:ce:2e:99:c0:34:4a:82:a2:38:ee:
b3:67:57:3a:59:f6:46:31:d4:51:60:d7:26:2e:ba:
db:e7:95:d2:b2:98:26:52:27:ff:b0:f6:c8:34:8d:
23:4f:bd:5f:ef:e6:c8:72:72:e2:c6:ae:de:7c:cc:
fa:6a:9e:94:d0:89:45:07:4e:8e:44:07:d9:68:a0:
e6:5b:00:7d:e1:a5:31:1f:a8:bf:9d:fc:ea:3b:98:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:78:AD:02:47:7E:50:8D:1F:3C:33:87:73:59:6F:DA:57:39:97
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:e4:c6:04:76:34:62:db:4a:07:7f:1c:31:5f:a4:df:ef:
e7:b1:35:3b:ab:36:66:8f:ac:93:b4:52:11:a3:1e:de:bc:7d:
d0:28:51:9a:83:a2:26:b8:64:be:a1:01:da:a6:8d:52:e1:74:
a1:08:58:87:38:bf:94:3f:f9:4d:c5:c8:60:8f:f3:c9:e4:e5:
0e:72:49:3e:ef:75:c5:32:33:8d:86:ff:2f:dc:09:6f:d8:9d:
65:d0:70:c9:56:39:dd:89:9e:08:99:b4:a9:f4:14:e1:82:8a:
8b:07:b1:d1:dd:83:68:52:d0:1c:7d:5e:a2:a3:47:9d:95:99:
02:6d:9d:94:d4:e9:fe:dd:ee:58:d0:07:d1:e1:b6:93:72:ae:
8d:7a:01:1a:7b:f2:8a:2b:bd:44:77:05:8d:78:b8:8f:28:58:
c3:12:e4:10:10:b0:13:bb:15:69:3c:4f:b9:ae:8b:de:ae:2f:
f5:2d:c7:47:79:c1:1c:a8:b5:bc:9b:5e:ae:50:c9:85:e1:93:
81:03:86:8a:0c:80:c3:d1:df:9e:85:02:34:8d:98:96:9b:98:
76:8e:a1:29:4c:0d:93:f7:fc:24:f9:36:f4:11:fa:1c:5f:0d:
79:73:6f:05:6e:7d:a9:4c:ff:ce:33:d1:4d:b0:20:48:f2:bd:
0f:ac:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:01:27 2025 by rpki-client