Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: vwUO5X+dmLuUeenY3xjbJ7OshqOLk/qN0uBKN/BKFtI=
Subject key identifier: 9D:B5:C3:0A:A4:A8:3F:DB:C9:FE:A4:F9:51:A9:74:24:18:54:2D:0A
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 0197B82148BDC1C01DDFFEE033321BE5B310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: tDqGX+A6xoFZAzgK1g8G1+buCeyOgqSkZhBGyRybAAA=)
2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:48:bd:c1:c0:1d:df:fe:e0:33:32:1b:e5:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=9db5c30aa4a83fdbc9fea4f951a9742418542d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:6f:b2:94:59:b6:e3:84:a0:55:6c:12:bf:
d0:2b:72:20:99:35:44:5a:3b:cc:4f:31:6d:a8:6d:
8f:25:f2:7e:1b:e1:fa:bc:06:c6:14:59:2b:a5:3e:
99:eb:12:78:2f:14:ac:49:b7:4f:25:7a:33:41:78:
bc:ce:b4:c6:5b:23:cc:16:91:be:53:0e:f4:f7:0e:
2b:a0:78:e7:c2:db:03:ee:f6:d9:35:64:54:6c:1e:
38:0a:ff:c0:26:6f:08:18:51:e2:4b:02:d2:f6:cc:
56:6f:fe:9a:5e:66:43:98:0c:d4:3a:a5:83:3b:ea:
86:9b:49:b9:da:a3:3a:cc:da:b8:37:d1:e7:26:df:
28:13:bc:b7:05:ac:1f:84:0a:4a:be:74:82:02:ef:
79:70:1a:b7:a8:1c:b3:8e:00:6d:39:3d:cf:9e:5b:
6f:77:a4:bd:d9:af:9c:34:3f:e1:ce:d5:05:2f:ed:
8b:11:69:b2:8d:c2:dd:b1:ac:e4:5a:e0:8f:ff:46:
65:ab:4e:2b:fe:33:07:c9:af:9e:e4:c0:58:79:65:
ea:7e:9e:5e:ed:a0:35:e8:af:b4:88:7b:94:a4:c1:
d9:97:a3:59:c0:2b:ab:cf:70:6f:27:98:9c:27:5f:
3e:df:f5:2b:3f:21:56:ba:57:4b:a4:8f:50:4e:d0:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:C3:0A:A4:A8:3F:DB:C9:FE:A4:F9:51:A9:74:24:18:54:2D:0A
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:33:a3:86:85:ec:6e:07:b8:56:58:34:a1:f5:ad:4f:02:
80:84:e6:dc:22:9a:82:5a:40:b8:8c:14:10:ca:21:d6:38:c7:
b3:d0:77:dc:46:d6:f8:c0:05:51:7e:26:59:d6:07:88:fa:55:
2f:6b:8c:87:47:5f:53:11:44:0c:af:df:d8:ef:4f:65:9a:b2:
0a:b9:b4:0b:4a:77:b7:8f:dd:54:f0:fc:07:6d:46:88:ad:40:
62:5d:3d:1a:85:13:c2:d6:29:74:05:76:76:7e:a1:fc:49:c9:
e7:28:ea:10:6b:31:f5:98:34:43:36:ec:51:ed:f2:27:67:9e:
50:2c:95:bb:b6:93:f0:ca:49:06:19:78:eb:10:63:b5:38:d3:
dd:f7:0e:bf:e2:4f:fa:f7:3f:59:9a:1f:a7:a1:55:e9:6b:e2:
de:0d:c5:6d:d5:16:a4:d9:91:9b:af:0f:41:73:8a:ca:bc:60:
70:76:8a:8b:3c:8c:9d:67:7d:d3:65:26:8e:b8:ed:71:fa:ea:
ee:09:42:61:da:b5:32:d5:d6:c6:1c:3d:ba:cb:76:f2:50:1a:
ee:8f:e6:8b:74:e1:d8:44:d6:0e:6c:87:9c:a7:22:4f:31:c0:
b4:0e:4a:f5:1a:42:74:25:ec:93:b6:a8:4c:59:de:aa:23:bc:
73:c7:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:06 2025 by rpki-client