Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: J2iPwjcce/v47X/3ATDXRWRIdAtPItUQM/gSi06AumM=
Subject key identifier: 81:2B:19:F7:6F:BF:54:09:01:81:9F:97:A4:F2:7D:BC:E1:FA:71:39
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0197C91503258B991E677061DDC2A9975845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1251
Signing time: Wed 02 Jul 2025 03:01:26 +0000
Manifest this update: Wed 02 Jul 2025 03:01:26 +0000
Manifest next update: Thu 03 Jul 2025 03:01:26 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: 7v1cgOznwJgwryW5UIN9UQ5zNYilzN/MnRCaFi2vwaQ=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:15:03:25:8b:99:1e:67:70:61:dd:c2:a9:97:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jul 2 03:01:26 2025 GMT
Not After : Jul 3 03:01:26 2025 GMT
Subject: CN=812b19f76fbf540901819f97a4f27dbce1fa7139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:05:ea:d7:76:0e:2b:b4:df:d8:c3:4e:9d:
c1:17:c6:30:4e:58:fc:e7:f2:00:21:15:2d:f0:05:
ea:d3:e9:50:92:22:80:89:d3:db:89:44:80:15:a9:
bf:d9:e8:6f:79:02:54:fe:a9:53:9a:10:32:79:bc:
62:c8:2d:f6:2f:87:38:7b:ec:61:5c:de:eb:67:e1:
69:ed:41:eb:5b:7f:2c:5a:08:85:a1:92:ee:85:d5:
be:c0:79:0e:6a:86:c7:23:fe:77:a9:77:52:be:88:
69:ec:64:26:0f:53:0d:9e:94:f3:76:3e:a9:d0:bf:
1c:08:e5:33:f6:2f:b0:1a:01:9e:bc:ce:7e:be:25:
d2:0a:d9:d2:12:39:5f:2e:03:9a:2d:d6:e7:b1:80:
2a:41:c8:7c:c9:49:21:9e:72:ba:f7:53:45:85:d1:
b0:25:81:4e:4d:a5:65:81:58:73:55:31:63:58:bf:
b2:f1:39:40:1a:5f:11:73:22:52:2e:a2:27:d6:25:
db:6d:c5:2a:c0:48:ba:3b:fd:db:29:20:1d:90:69:
a1:5a:dd:8a:05:92:ee:a8:75:14:b3:f4:2a:c9:14:
60:db:cf:7f:44:6f:ff:d9:f9:2e:0a:49:52:57:48:
b4:27:2f:84:b8:bf:ed:a7:b9:4c:5f:a9:ce:dd:a0:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:19:F7:6F:BF:54:09:01:81:9F:97:A4:F2:7D:BC:E1:FA:71:39
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fa:ce:f3:48:fd:f9:c6:89:af:28:54:23:b4:1a:06:ef:0e:
68:ad:b8:8b:7f:66:37:b4:ca:53:df:e6:f0:e5:f3:1f:72:c2:
70:1e:3a:1c:18:f7:96:67:a7:c6:eb:eb:0d:85:3c:d8:a9:f9:
3f:52:58:e7:52:1b:dd:96:1b:80:27:24:af:f7:8a:58:01:59:
fd:85:8e:d7:c4:72:f2:55:e6:59:cd:5a:87:7a:3a:41:af:b6:
43:ee:8c:82:61:f6:e4:e4:50:36:c9:f6:05:57:39:6e:5c:73:
fb:41:3d:b5:f1:27:83:13:c7:60:c8:5f:bd:a8:57:74:26:b1:
b1:4e:2f:01:a6:02:ca:94:34:05:77:ea:b6:40:e8:3f:d4:c8:
e7:5e:07:e0:26:8b:81:71:30:4a:33:bd:40:8b:0a:b2:15:39:
77:28:87:4b:3f:1b:3a:52:3b:57:4e:ee:c0:89:97:f0:e7:9d:
40:58:f9:aa:ce:dc:a1:65:76:96:1f:fc:87:62:6b:23:28:0c:
52:b7:4c:cd:5b:93:ce:37:6c:8b:89:ee:ce:e1:97:60:07:41:
4f:11:28:5a:3d:c5:f5:25:19:98:53:92:af:c2:c5:d4:29:ee:
47:c6:55:b5:7c:ac:ff:16:96:75:85:b7:cf:9c:eb:08:cf:5e:
ef:0e:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:38:30 2025 by rpki-client