Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: 6wUg7Lhi7UB7zD7Tq89Zl4AnChqDT2zkRpGcwE7DatE=
Subject key identifier: 21:1F:23:57:32:DD:5F:22:72:A1:A7:C6:50:A5:1C:2F:83:9B:AE:67
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0197B6D732C5DEAE17255E4974595720C781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: DIpkV7eo7ygErI0VwQmFplRrpzl+0x6vzFjOfjhgRbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:32:c5:de:ae:17:25:5e:49:74:59:57:20:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=211f235732dd5f2272a1a7c650a51c2f839bae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:0e:c9:41:6f:a9:18:33:f8:56:d7:d1:4f:
25:31:d6:ca:fe:de:aa:c3:57:84:57:c5:49:8f:3f:
87:08:51:12:fa:67:31:48:72:e1:07:3f:81:90:d3:
1b:4d:cb:58:15:aa:74:bd:12:18:b3:84:ed:8a:d3:
78:9e:17:76:15:23:76:4b:cf:c3:76:05:15:34:88:
db:f9:3a:0c:16:31:95:92:5b:63:7f:34:f9:d8:d6:
bf:1a:ad:3c:f7:21:28:1c:c8:87:b6:e2:60:51:4d:
7a:dc:af:31:77:c8:25:40:8f:b5:84:89:db:86:da:
20:38:4f:58:5e:6f:61:c5:eb:a8:44:70:f1:5a:73:
39:58:51:65:51:2f:e4:e4:7a:49:a9:dd:a7:c7:00:
90:ac:19:84:06:8b:cd:52:38:14:bd:57:ce:51:f1:
b9:f3:c5:a4:de:6d:15:d8:e6:51:e5:e0:ef:6f:00:
cb:bb:43:e9:fb:49:c0:5d:f5:38:ee:bf:0e:55:70:
6f:c4:d2:ad:9b:2f:9d:58:6d:7e:d7:fb:8b:97:df:
6a:9f:1f:7f:4c:cd:31:2c:0a:11:08:4e:a7:50:9b:
9f:36:f2:8f:98:37:ef:98:00:b9:5f:8b:20:85:36:
4e:5f:38:f4:aa:07:38:1c:62:15:8b:ae:45:de:2f:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1F:23:57:32:DD:5F:22:72:A1:A7:C6:50:A5:1C:2F:83:9B:AE:67
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:c1:11:0d:75:7b:15:ba:68:ad:7e:88:44:b5:1d:13:a6:
d3:cd:50:45:b1:49:ef:7d:62:e0:df:44:05:b4:b2:87:02:59:
ef:4d:a8:8d:e4:91:e4:d7:0a:2d:d5:a4:00:14:b6:b3:2d:e5:
aa:4d:a6:50:70:75:64:a8:7f:22:2b:ef:78:c8:39:f4:9b:fb:
1c:b8:e6:b0:21:58:30:80:76:17:a8:48:41:87:e4:34:06:5f:
28:e2:cf:16:e2:18:47:1d:6d:5f:48:32:20:24:f9:d9:c6:cd:
31:1f:ca:30:e0:a4:86:f2:13:f7:dc:d3:70:48:4b:c8:7b:12:
d5:09:c0:53:9b:f3:b3:d6:a1:9b:14:21:a5:bd:ef:43:92:7e:
2a:3f:ce:c1:e5:ae:cb:0c:8c:ec:a1:4b:24:ef:79:62:80:44:
87:eb:bc:b3:61:c4:12:f5:4a:79:e2:33:4e:0f:f2:71:af:97:
d6:b0:04:6e:ac:d8:ce:b2:e9:2c:6f:b8:a9:36:58:3a:54:ca:
e8:1c:e3:3a:93:60:77:17:29:c0:cf:89:8b:1e:a9:60:a1:3d:
4b:f9:a6:ee:d5:0f:0c:73:58:66:9c:3e:e4:14:68:8d:16:68:
87:e7:ff:41:0d:8a:83:f9:e4:11:af:a8:f8:58:9e:51:96:03:
17:01:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:45 2025 by rpki-client