Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: BfI1Pzr9xr2giqzQIRnygrUvVRkELkDSRuQurLMgX1A=
Subject key identifier: 64:C6:FA:99:3D:79:20:47:8D:21:33:CE:91:71:35:DB:37:43:40:5B
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0197782ED6A335DFCE351AD945F8464C0F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 10:00:24 +0000
Manifest this update: Mon 16 Jun 2025 10:00:24 +0000
Manifest next update: Tue 17 Jun 2025 10:00:24 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: 0G1cx56jWBGMZDVswTNME6PaDf+5vVhPJLPWNjbJWcs=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:d6:a3:35:df:ce:35:1a:d9:45:f8:46:4c:0f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jun 16 10:00:24 2025 GMT
Not After : Jun 17 10:00:24 2025 GMT
Subject: CN=64c6fa993d7920478d2133ce917135db3743405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:55:72:c2:87:f2:42:98:26:42:5a:e6:d8:
6d:2c:22:78:8f:03:e4:61:54:6d:53:aa:9c:b1:6a:
88:a8:28:0a:17:5b:64:e0:20:35:83:75:86:29:8a:
4c:1f:6e:89:7b:b6:73:e2:6a:8e:bc:f6:84:70:f8:
f3:70:08:d6:ac:cf:61:41:f8:ab:a7:80:d9:d3:45:
39:21:b0:75:6f:17:39:b9:84:f9:0f:00:b3:b5:1d:
6a:bb:c4:7d:12:67:64:ab:80:f5:30:f2:ff:dd:51:
50:ed:54:e4:af:a1:a0:d6:16:4f:5c:65:dc:0e:e3:
15:92:05:2c:a1:bd:61:e1:68:c5:7f:01:cb:ec:c4:
bc:f2:32:2a:57:3f:47:b0:dc:da:09:20:88:fa:2e:
22:fe:6e:9f:e7:51:02:d5:c2:ca:c3:0c:8a:0a:1f:
63:36:07:36:a1:dd:6d:33:c1:6e:ce:7e:86:86:fb:
49:04:b1:28:78:b8:e5:a3:47:cc:90:01:11:6a:ab:
0e:4f:d2:16:7d:6e:88:92:42:31:70:c8:61:de:31:
6e:4a:e4:50:ef:20:e4:0b:38:af:21:2f:d2:b6:0c:
cf:48:a5:91:20:a7:2d:03:79:22:5a:6d:58:34:9c:
4a:a4:d3:ae:18:06:5a:21:3d:84:bf:01:46:38:f9:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:FA:99:3D:79:20:47:8D:21:33:CE:91:71:35:DB:37:43:40:5B
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:7e:a8:42:d5:17:1e:ba:41:40:3a:0b:a3:90:81:f2:76:
ff:88:4c:6a:d0:f9:ef:c3:c9:33:0e:3f:66:f2:55:6e:37:a7:
68:03:db:6c:6f:7d:73:1c:cc:b7:41:99:f1:ed:49:8a:f3:a4:
14:86:61:c7:65:c7:2e:1b:f1:24:9b:b4:41:47:09:1d:58:30:
83:6a:ce:7b:33:57:c2:0d:39:3c:3b:f9:b9:8f:68:b7:2b:3b:
b7:de:d6:51:ee:87:88:44:9e:60:27:ac:53:1e:72:a8:da:69:
a5:68:bc:81:7b:e2:53:5f:d5:08:f4:2c:a7:99:f1:19:10:e7:
39:44:02:fd:0d:3e:d4:e7:59:ce:4a:c7:6d:ec:00:6f:94:8e:
3b:80:b4:08:26:ea:25:26:ce:92:db:16:26:6d:3a:cf:87:9c:
88:d6:cf:49:e8:b8:2e:e2:22:a0:d7:2f:6d:a1:4f:26:fc:5c:
79:04:60:e7:87:23:c0:cf:c6:a2:04:2a:a1:23:c0:69:8d:1d:
40:20:db:c0:35:af:c4:a6:0c:49:36:ef:f1:5b:1c:af:61:b4:
3a:0d:59:a8:4e:d1:3a:0e:a1:6c:09:1d:ef:1c:90:5e:ce:f3:
49:d7:1d:43:38:a6:16:fe:62:35:27:1c:48:8c:a1:38:54:2a:
0d:1f:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:03 2025 by rpki-client