Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: +/GxjwPozj48kTx76SvK7iyv14srDX70fwhwfIC/Xy8=
Subject key identifier: B7:4F:2A:31:A0:B9:D8:43:DF:F7:E5:77:C8:43:14:D7:A2:38:1B:44
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0197711B0FDFC8B8454159466E14CCCBDADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0E3F
Signing time: Sun 15 Jun 2025 01:01:28 +0000
Manifest this update: Sun 15 Jun 2025 01:01:28 +0000
Manifest next update: Mon 16 Jun 2025 01:01:28 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: T7Heb9bk6NQfzXT4xvrYa08tmao0nBPb1tt7FKTmXPE=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:0f:df:c8:b8:45:41:59:46:6e:14:cc:cb:da:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jun 15 01:01:28 2025 GMT
Not After : Jun 16 01:01:28 2025 GMT
Subject: CN=b74f2a31a0b9d843dff7e577c84314d7a2381b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:1d:f0:cd:92:4c:6e:d8:2c:e7:a7:52:3c:
44:04:b6:ee:48:5e:72:f8:54:26:f3:fe:0e:ab:24:
82:b6:91:39:9e:9d:6a:91:f8:08:62:69:4d:09:3c:
70:12:77:df:48:78:92:af:bb:0d:7c:28:46:70:89:
6d:11:6b:1f:53:45:f1:d1:92:48:46:29:96:72:88:
12:d3:36:13:f6:47:06:68:48:23:18:99:97:6f:ad:
b7:6e:86:23:e9:34:16:d7:eb:1a:87:bd:90:4b:08:
9a:2a:ab:a6:3c:e9:14:ad:96:9a:84:5d:84:67:63:
c0:3e:29:25:e9:1f:a5:ab:c5:d6:49:60:65:b8:fb:
1b:c4:c3:9f:33:f5:24:3f:33:f9:54:15:3e:a6:46:
4b:86:c7:dd:af:e5:c3:35:56:12:21:92:18:55:00:
80:a2:b5:8c:1a:07:18:0f:fd:0c:c5:25:b6:03:5c:
f6:f9:dd:3d:59:e2:ce:06:be:90:4c:02:3a:61:b4:
8e:06:4d:9b:16:4a:e3:f5:35:a8:c6:9a:ab:9b:1f:
bf:ed:d2:b2:f0:15:bc:77:5d:92:21:04:4b:dc:7d:
ca:8f:42:0b:c5:c1:15:93:42:09:65:54:52:f4:f0:
ec:02:e2:98:66:cc:0e:cd:dd:37:e4:64:0f:64:e9:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:2A:31:A0:B9:D8:43:DF:F7:E5:77:C8:43:14:D7:A2:38:1B:44
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:86:0d:f2:0f:90:17:71:62:ab:a3:df:a7:46:49:6c:75:a8:
1e:c1:e0:4e:e9:51:26:57:86:cb:c9:41:6f:a1:2e:ed:1c:a2:
4b:09:ce:14:3d:7b:b4:3c:d8:74:13:40:14:29:19:6f:dd:22:
ad:d0:66:9a:59:21:b7:93:4a:cb:27:70:3f:7a:0a:17:b3:fc:
ae:f3:2c:4d:1d:dc:83:22:51:cc:8c:60:64:f1:8c:52:e3:2d:
1d:a2:f0:91:43:35:75:b9:36:7d:8a:7c:da:24:d6:f6:08:cf:
cd:06:47:75:2f:39:0e:ab:02:f8:71:f7:45:98:69:33:f3:61:
4e:ab:e0:e6:55:16:ce:a8:b7:2b:7c:9b:a1:70:59:29:d5:5f:
53:f0:97:85:6a:2a:7a:dd:f6:92:72:68:a1:de:c1:c0:11:48:
4f:23:ce:22:db:5a:70:76:e7:c8:b5:67:2d:f9:94:ce:5a:57:
bb:13:20:91:f3:b4:cf:8f:62:54:e6:9a:b9:7f:17:fd:1b:0d:
84:c9:80:bd:d1:00:0e:ce:d1:ac:74:8c:39:83:21:ea:16:6c:
4f:41:82:17:5c:87:9e:9a:8d:ad:b4:86:02:66:80:b2:d6:33:
7d:1e:3f:e1:ee:45:36:ec:c6:46:66:15:65:ce:bf:3b:4e:1b:
66:6d:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:48:01 2025 by rpki-client