Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: jOBcKxI2e41St1iJay1SAM+qdr5V6LSY8o8NSl59rIY=
Subject key identifier: 3E:10:E5:50:F9:E6:86:2C:10:9B:59:67:05:1D:85:34:80:EA:D1:35
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 0197B6D77ED68F958F263B8CA848C24B03F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0C61
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: 1AJhYrTccw/hseNKVG+/MFZ5WYXU7Fexg3j1AHbxMGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7e:d6:8f:95:8f:26:3b:8c:a8:48:c2:4b:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=3e10e550f9e6862c109b5967051d853480ead135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:61:2f:b6:1d:a8:93:99:d1:3c:5d:50:33:
d3:0b:db:99:ab:bf:8a:e0:fe:d8:95:43:90:d7:2f:
74:4c:94:ff:62:7c:c7:12:49:51:c2:be:e3:ec:12:
65:55:d4:34:c4:c8:39:8f:df:44:c6:8d:7e:76:fe:
fa:ff:f8:10:c2:53:a6:bc:ba:55:53:00:77:03:4d:
95:ed:01:70:0d:09:fb:3f:d8:28:aa:dd:39:88:fd:
e0:da:00:e8:97:02:1a:b0:87:66:b6:c1:f0:e4:36:
71:8c:14:e9:2f:60:10:06:58:d3:d2:e3:b9:b5:c9:
8d:21:8d:b1:c9:e5:5a:fa:fd:d0:74:fd:1c:cc:91:
62:c0:59:13:28:27:4e:35:a5:37:23:79:9d:72:0c:
93:9a:34:9a:b3:e4:96:d0:38:de:8d:d2:5d:01:d5:
36:1c:44:b9:d0:b6:c9:9e:5b:e3:b2:0a:b3:a2:bb:
9b:00:ec:06:bb:f4:39:b4:d6:29:42:1c:d0:4d:67:
62:03:06:64:0d:ef:e5:7a:cc:9e:e4:a6:dc:b8:c1:
70:23:f2:5a:99:ad:60:0c:db:2f:fa:fa:e1:5a:4f:
62:0a:d3:08:4b:d9:be:99:64:d6:a6:43:2e:96:6e:
8a:79:49:52:16:05:61:fb:47:4b:e8:65:74:d1:6d:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:E5:50:F9:E6:86:2C:10:9B:59:67:05:1D:85:34:80:EA:D1:35
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:cc:1f:27:ba:bd:fd:0d:0c:e2:8b:92:6c:a7:c0:d5:18:
24:21:0a:6e:2d:77:ed:5c:3c:04:3b:32:0c:9f:e4:e5:c6:be:
f1:23:2f:b6:28:68:38:fb:c8:1e:a7:20:f4:9c:95:d4:b7:6d:
e7:94:47:ee:be:18:95:bc:76:50:2a:c8:11:20:ab:b6:0a:30:
21:c9:fd:e2:db:6a:07:9f:df:e9:2e:81:71:49:85:d9:f8:65:
d2:71:ca:43:c4:15:97:42:21:79:5d:08:62:b2:17:07:39:c3:
7b:df:c9:c8:2e:78:d2:d5:0a:38:aa:3e:c2:2b:a6:af:25:c3:
b0:77:2b:00:62:d3:cb:2e:9c:a5:f6:66:18:14:d6:37:9e:a1:
9c:f2:79:65:86:74:62:1d:60:ea:a8:72:e1:63:bc:ee:92:38:
ee:3e:ac:c3:59:5a:47:fb:ed:2c:ff:d0:97:f3:aa:85:c6:c9:
2f:9f:05:c8:17:5a:d5:6c:50:8e:cb:e3:58:33:10:a6:7b:ee:
f6:f0:33:9f:dc:8e:c4:b6:64:09:d6:0e:a7:67:f7:af:4c:91:
89:39:50:14:42:66:7e:8a:89:40:5f:7c:de:75:6d:2c:14:b7:
9c:40:79:4c:03:46:1c:29:c4:be:ea:2a:8f:98:a2:2e:1e:8e:
3f:02:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:20 2025 by rpki-client