Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: XNBCa0rAVPlwLyLDeN1qFHfmrDRTjrjOedgchAc+vAQ=
Subject key identifier: E0:11:46:CA:F5:2E:7A:97:02:E6:66:17:FB:00:6A:5A:77:60:A3:AA
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 0197B6A1EE30FD6461884F4C35C15A063CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: rbBEt+kK3EGQw5lJCl64PbCwz/BbVa4XuvCwWCSrsv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ee:30:fd:64:61:88:4f:4c:35:c1:5a:06:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=e01146caf52e7a9702e66617fb006a5a7760a3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:b6:4d:ba:5d:5f:9c:44:49:a6:f6:c4:4a:
b8:d4:ee:11:6e:f3:1d:44:66:dd:33:33:30:18:2e:
44:37:50:c6:74:cd:20:29:ad:0f:d9:f9:f9:74:c5:
27:f9:c0:28:3c:21:c1:b3:fa:b1:ff:27:f7:ce:6b:
c8:ca:ec:99:0b:d7:f5:05:e0:4f:4c:4c:82:4a:b5:
41:53:24:19:75:24:e7:c0:f4:44:45:c3:d2:de:bf:
46:16:4a:f0:49:83:fe:87:b9:50:b6:01:49:bb:e2:
d9:5d:ca:69:23:0a:db:08:d7:b3:3b:68:a2:8f:76:
67:42:48:c5:f4:91:be:c5:a8:9c:fc:3c:3a:94:6a:
8b:b7:62:92:09:7e:4c:62:ef:a6:63:70:24:a8:a7:
b5:8f:8c:4f:d4:0b:49:cc:42:20:6a:24:22:88:af:
a8:9f:12:db:4d:72:84:eb:47:ca:a3:53:0b:61:6e:
fb:20:db:8e:12:e1:a0:62:aa:f8:74:3c:a9:81:82:
89:3e:e1:af:7c:ed:49:3e:79:7c:ef:1f:09:b5:bb:
00:06:a2:05:16:90:61:c8:b7:f7:39:d8:96:91:dc:
60:74:85:df:2e:71:6a:c2:ad:a3:a2:aa:95:e3:7a:
dd:c1:9f:06:65:44:91:df:2c:4a:0f:d7:fb:28:ab:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:11:46:CA:F5:2E:7A:97:02:E6:66:17:FB:00:6A:5A:77:60:A3:AA
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:53:9e:8e:3b:db:d2:00:f4:23:c2:96:8c:63:68:30:09:
c1:90:3f:bc:0b:b5:b3:82:c0:e0:e7:d1:00:83:d3:9c:3e:11:
15:17:15:b9:d0:21:55:76:de:71:a3:64:4f:be:48:68:31:6d:
e8:c0:25:51:d9:b6:3b:db:12:d2:66:ba:bc:2b:aa:fc:8d:3d:
f1:61:62:52:12:88:f8:4b:7e:22:88:f8:be:55:a4:ef:d9:76:
5c:3c:3c:c0:37:20:2d:59:0e:df:e3:83:de:20:b4:27:80:06:
2c:bf:be:0c:be:ec:96:87:df:71:bb:20:0e:50:92:de:f4:a8:
d1:69:b6:08:0d:9c:a5:ce:3a:8c:97:b0:b4:39:3e:1f:8f:ac:
bd:05:a3:db:92:af:2a:9c:49:46:e1:3e:80:5b:46:a9:e5:a5:
1e:50:03:0e:a0:7d:ec:16:39:6e:d5:aa:20:5b:75:ce:f2:2b:
4e:6e:12:78:b7:74:39:5c:92:63:b0:5b:65:81:27:3f:b4:52:
57:4a:4f:a5:fa:23:fb:3e:6f:cd:26:6b:da:6d:51:19:3f:23:
fc:9f:8d:69:a8:cc:1d:47:a7:ce:3c:d6:99:14:22:ca:dc:d9:
9d:c2:5d:95:26:c5:1c:4b:7c:ae:bf:58:0a:ea:20:14:17:0f:
64:4e:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:14 2025 by rpki-client