Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: Sv+84gRQVorJf3bZ6Ix2xUIPp8o6E7S6EXqZETnz/aE=
Subject key identifier: CF:96:23:C3:D4:B6:20:D6:A4:9A:16:A9:39:FA:8C:63:8E:9A:FB:7D
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 0197B70EC9C24DB25B26B4F6ED14EF30BF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: A5XxGbHAGL+VQcGDmDVhzwFrlW2x9BfYfOi10bpnsrQ=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c9:c2:4d:b2:5b:26:b4:f6:ed:14:ef:30:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=cf9623c3d4b620d6a49a16a939fa8c638e9afb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:5b:ec:1f:53:63:31:df:a6:7a:80:46:1e:
b7:b1:99:88:cc:7f:55:97:ee:4e:b1:6e:73:e4:c8:
80:54:72:22:79:1a:56:cf:bb:e7:47:b1:1c:5e:88:
69:cc:df:a2:4c:6e:2c:e0:bd:c4:cf:2a:5a:70:ee:
cf:aa:12:c2:92:d6:d3:eb:96:55:f3:72:53:66:1d:
80:f5:86:0b:4c:ed:6c:6f:d1:4d:b2:e7:bb:ad:4c:
81:ef:35:6f:eb:55:f6:44:ad:6d:19:cd:b1:1d:f3:
7d:9e:fb:40:02:0e:75:dc:48:a0:55:52:77:12:b1:
4c:72:61:2d:1f:74:92:1e:cb:6b:e6:cf:21:de:bd:
25:9f:45:36:61:9a:dc:69:44:be:69:98:e2:35:cd:
cc:45:7a:a2:ac:53:bd:d9:b0:df:64:c9:2a:43:2f:
92:db:11:c9:7e:aa:89:4e:35:1f:78:cd:22:4c:28:
82:c1:ae:c6:61:e3:1b:62:e5:f3:66:2e:9f:e2:ff:
43:65:6c:6a:dd:53:3b:79:af:5f:f0:88:69:3a:44:
c1:61:b7:00:7c:ad:c1:f8:57:35:30:00:88:62:58:
98:a7:15:5c:c0:d0:4f:ca:1d:78:e5:f8:a2:78:7f:
93:bc:41:df:71:cc:66:e0:58:d9:8f:97:bd:23:85:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:23:C3:D4:B6:20:D6:A4:9A:16:A9:39:FA:8C:63:8E:9A:FB:7D
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:b3:38:ed:cd:cb:e0:23:47:b4:5f:59:1c:88:cc:87:73:
ae:3b:03:4f:ce:d7:b2:88:7f:37:24:e4:a8:1e:02:1a:6c:6c:
66:59:58:9c:de:50:81:29:94:3e:41:9a:45:00:20:df:1e:9d:
0f:cd:75:ba:b9:cb:02:e4:0e:9d:a6:54:01:3c:38:6e:3f:39:
5d:13:87:51:30:ef:26:ee:35:47:93:c6:aa:b5:71:77:d9:3a:
d7:22:df:6a:a6:85:01:8d:51:47:a3:af:53:c1:a8:63:6b:4b:
5a:99:95:d5:d5:39:30:27:4d:2e:8f:b7:08:85:3d:25:cc:d2:
a6:d5:e2:68:59:05:ee:f8:67:77:e4:2f:d4:c7:33:dc:8c:8d:
53:f7:87:dd:c2:14:ea:b5:ca:74:9d:79:62:de:91:0d:14:37:
14:8f:81:f1:bd:b1:af:c4:2e:ff:e7:19:f4:ac:63:2b:a6:1e:
ab:29:dd:62:a2:a8:e5:85:52:f6:a6:bf:ef:31:59:77:1e:eb:
08:22:f6:b3:6c:60:93:79:7c:e1:7d:99:28:30:f4:7d:93:15:
0b:90:82:22:70:b1:08:95:db:7b:1b:53:a9:11:76:7e:d4:1a:
f0:7d:7c:91:c1:a1:ae:16:51:83:7a:cd:16:4d:70:18:4a:8c:
dc:cb:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:08 2025 by rpki-client