Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: rRvZkrdHMtxK8BGxU/4+mq8mNqrqYf9S/JI2DwRieJ4=
Subject key identifier: 49:16:93:B4:9F:9F:6D:90:1D:3C:42:FF:13:6C:3E:7E:25:26:71:15
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 0197B8216629850E464EC3D68709687EF74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:01:25 +0000
Manifest this update: Sat 28 Jun 2025 20:01:25 +0000
Manifest next update: Sun 29 Jun 2025 20:01:25 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: wAMoYBnnYOuK0iXi28Uq2UHQSmI7kds8CHa0khL52CQ=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:66:29:85:0e:46:4e:c3:d6:87:09:68:7e:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Jun 28 20:01:25 2025 GMT
Not After : Jun 29 20:01:25 2025 GMT
Subject: CN=491693b49f9f6d901d3c42ff136c3e7e25267115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:8c:fb:61:a2:75:9f:c4:31:dd:ec:89:7a:
ed:9f:80:ef:45:92:7b:58:c9:5f:c0:2a:c0:71:3b:
4c:57:cd:2c:ac:a3:d2:b9:c1:71:1b:4d:b8:59:ff:
d6:55:85:f7:fc:2e:74:be:ad:a8:de:24:5d:08:6f:
19:7e:a1:f2:30:48:93:12:43:ba:e6:ed:a4:e3:b1:
74:ca:7e:be:94:70:84:8b:9e:b4:ee:1d:1a:4b:67:
56:dc:37:3b:6b:60:65:23:ef:21:fe:58:cb:51:cc:
55:54:f7:70:a2:69:79:39:71:8e:ca:19:d3:9c:35:
f4:91:d2:aa:30:fd:24:90:94:c7:59:84:2e:c3:e4:
4b:ef:61:22:71:aa:d5:8d:47:bc:47:0d:aa:7c:50:
1c:5e:0b:ff:b0:1e:c5:00:e2:51:08:2a:8f:b1:73:
7c:d9:88:94:64:a6:aa:cd:9d:41:ff:b8:be:95:8a:
0a:f5:a6:56:5a:45:da:e4:45:4f:84:22:10:be:b7:
fa:a3:01:6c:72:e7:14:e6:30:f9:8f:12:28:53:98:
22:a2:a3:e7:c6:57:e7:4b:3d:5d:99:18:de:75:3d:
53:0c:42:11:bf:a0:00:60:ab:53:df:1e:12:e3:53:
04:5a:a9:a1:ee:25:f1:eb:30:b8:36:c5:03:4b:1b:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:93:B4:9F:9F:6D:90:1D:3C:42:FF:13:6C:3E:7E:25:26:71:15
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a8:e4:49:22:f6:85:3a:1d:dc:9f:25:e0:9b:95:75:bf:14:
96:c7:f4:81:03:42:c0:46:b1:9a:9b:d7:6f:12:0d:ae:e6:2e:
8b:1e:54:09:9a:0d:dc:8f:29:a5:36:00:ad:2d:12:68:dd:f0:
c7:6f:a3:60:ab:bc:08:70:41:55:f5:2f:5e:76:c6:3a:d9:0f:
c0:b3:57:5f:3d:93:76:f6:42:16:7b:18:a3:9a:5a:95:bb:5f:
32:2d:4a:b3:7b:a8:f3:45:d8:f5:76:1b:b3:80:62:4b:14:0a:
c6:39:17:87:c0:71:30:5b:9a:dd:da:a9:9b:bb:42:76:7f:7e:
03:d6:55:b0:73:87:07:8a:d0:4e:be:20:83:98:fb:ba:a6:ef:
01:55:0a:cc:52:11:42:e3:d4:c8:dd:71:ea:3b:7b:be:de:8a:
c6:8c:2b:e1:6c:2a:13:b4:eb:da:2e:b3:1b:fd:00:53:d7:84:
c9:e1:d2:d1:72:e0:64:f4:ae:66:3d:68:3d:01:be:3b:e1:2b:
38:06:9e:ed:12:f8:c2:35:df:44:d5:81:e8:7a:98:f0:43:7a:
cf:1e:63:b7:9d:40:5c:c2:1e:aa:a1:e5:a7:d1:99:00:2a:31:
4a:a9:01:05:3d:c5:98:85:56:2c:fe:a9:65:f0:02:36:44:20:
9f:f4:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:58 2025 by rpki-client