Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: J+bOZ9Bc+0uYj0yOkSB8ZHTaqOszM5xSgxM4AwQjpuo=
Subject key identifier: 5B:CF:77:82:7A:7D:81:41:5F:3A:08:A7:84:DB:B0:B1:A5:6B:1D:39
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 0197B70EF61903134D3C004B12547154CB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 02BE
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: OLV+pzrNUFKhcHkooFFMp8jcsl3OJ2U/6SY9eRyVgrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f6:19:03:13:4d:3c:00:4b:12:54:71:54:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=5bcf77827a7d81415f3a08a784dbb0b1a56b1d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:4a:d0:2f:48:bc:0e:c9:9a:d8:ac:ae:da:
34:29:f3:83:34:a4:ab:8e:40:f6:c4:09:92:3b:12:
60:66:c2:71:67:0c:13:61:01:35:89:f7:8d:bf:87:
0e:bf:ca:f8:a2:05:58:72:11:61:83:e8:59:c1:a0:
49:d7:87:7c:91:03:18:f3:a2:57:91:f7:21:79:fe:
82:e8:96:8a:e0:ca:f0:83:5e:0d:38:95:c5:d3:2b:
38:21:db:4e:22:3c:2c:55:42:7b:22:95:0c:d9:1b:
8f:28:b5:d8:e6:f6:e5:2a:a2:30:0f:88:fe:0b:59:
8f:4d:fc:5c:7e:05:32:10:34:9c:6d:56:84:ef:83:
72:8a:1f:b6:6d:72:de:b6:65:3b:06:21:18:ab:ce:
26:9c:8b:79:da:6d:91:60:71:03:5a:6a:3c:1a:6c:
26:ac:a0:04:67:81:be:8e:26:ba:13:aa:41:ff:3b:
28:d9:55:9f:46:6a:de:bc:2b:b1:14:69:0d:0a:33:
c9:93:5f:48:af:bd:49:56:ca:78:39:fa:85:0f:74:
2a:f2:41:71:5f:68:b8:ef:ea:d3:66:32:23:b5:12:
92:3c:92:48:5f:21:43:32:3f:f9:75:b7:88:c8:30:
50:ea:76:42:97:1f:7f:25:3a:b8:f8:74:e9:21:08:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:77:82:7A:7D:81:41:5F:3A:08:A7:84:DB:B0:B1:A5:6B:1D:39
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7d:17:22:ee:6b:d9:99:17:79:fe:2c:5f:4a:63:e3:50:a1:
e4:68:61:fc:a4:22:6b:07:39:9e:e0:97:b4:f4:69:0c:94:ba:
c1:9e:c6:16:08:35:6c:7f:8f:46:52:e9:75:ea:96:d3:fd:55:
07:0b:d6:ff:9a:21:8a:8e:55:a5:78:9a:84:97:2f:37:b8:08:
51:1f:2d:47:bd:11:6f:36:02:c1:e0:76:cd:68:03:2e:3e:3a:
ad:60:cd:b5:03:51:71:64:12:71:71:55:71:6f:c2:af:65:96:
e5:1d:79:30:01:cc:4d:8b:8c:1e:86:f0:04:bc:36:84:dc:8a:
09:9a:55:41:bb:62:d1:a7:28:2d:fb:ad:4c:42:1a:b5:5a:51:
ec:2f:b9:50:f2:5d:60:19:36:dd:76:b3:44:c2:45:43:ec:f7:
b7:61:50:e7:32:9c:a6:b3:2c:ea:5c:ba:21:cc:4f:a4:ae:91:
f5:b6:35:04:c9:3c:7a:33:2e:1a:c6:ac:1a:22:49:42:c6:e1:
f7:78:45:ad:0c:25:d5:c9:82:bb:08:99:91:99:3c:b5:e5:de:
9c:9f:70:dc:38:c1:14:9c:a1:81:ba:3e:9f:54:1c:e7:56:ba:
e5:d3:34:81:28:24:bd:89:9b:85:40:59:d0:23:73:98:04:26:
62:56:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:36 2025 by rpki-client