Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: pSfXPIjdhac33l22nLg7EKDH/TMgT51uQTGuCohqYX8=
Subject key identifier: 97:71:EA:23:E2:FA:94:70:02:04:27:99:1E:C4:C5:14:52:60:13:F3
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0197B77CC706C13FF6EDE544AD73DF01E627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:37 +0000
Manifest this update: Sat 28 Jun 2025 17:01:37 +0000
Manifest next update: Sun 29 Jun 2025 17:01:37 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: eluPtrchzQxNwXtM3UFNjs4Y1qaIYWL1aXCnvJlivYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c7:06:c1:3f:f6:ed:e5:44:ad:73:df:01:e6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Jun 28 17:01:37 2025 GMT
Not After : Jun 29 17:01:37 2025 GMT
Subject: CN=9771ea23e2fa9470020427991ec4c514526013f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:54:b8:59:02:00:8a:81:0a:d4:0b:45:4b:6a:
25:09:dc:f7:80:cf:08:06:e1:cb:56:99:33:c6:d1:
cb:f3:10:87:f9:2a:d5:93:99:4e:81:3d:ab:3c:fa:
03:0f:db:3e:d9:cf:02:14:af:20:7c:e4:ea:42:d9:
48:4d:b2:fe:60:37:37:48:1c:f8:2e:24:ed:cd:e3:
75:8b:4c:6b:68:75:d2:89:a9:70:65:af:8d:25:a0:
56:d9:3b:66:12:4a:ec:78:bd:d0:7d:ff:69:c2:64:
98:36:da:34:a3:2d:fa:19:ae:5b:86:71:a7:c7:82:
61:e9:8d:3b:7e:b1:f4:1c:b1:9f:b2:13:03:4b:00:
f4:47:5e:f7:0b:2f:40:a8:7d:45:cd:ac:07:14:09:
bb:e0:78:9c:48:e7:22:46:06:f0:e2:f3:3d:72:5b:
b2:d3:23:b5:5c:61:3a:37:6e:13:f1:4b:d9:f3:14:
bf:36:36:3d:10:a3:76:e0:d9:df:89:98:a8:60:6f:
01:4f:2d:4e:46:08:e9:72:3e:e6:bf:30:86:52:92:
d6:3c:33:7b:21:00:14:b7:eb:54:45:98:4b:6e:36:
86:ae:78:41:a4:f6:12:34:f0:f1:a5:ac:78:0e:a9:
39:13:ab:a1:85:2d:30:17:0a:62:73:40:78:34:fa:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:EA:23:E2:FA:94:70:02:04:27:99:1E:C4:C5:14:52:60:13:F3
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c6:31:b4:8e:50:53:91:37:72:64:88:e6:5c:6a:f2:d0:06:
15:fd:98:09:9a:78:e1:fb:9a:b4:54:50:f3:1a:4e:9b:55:91:
bd:7e:9e:0e:b8:46:c3:41:53:b7:f3:83:03:3f:73:87:6e:9b:
3b:49:2b:fa:05:b7:57:36:8b:13:52:1b:6c:d7:f1:f6:28:0a:
f4:59:c9:5b:19:7d:7a:2c:e6:fa:7a:71:16:ec:3a:92:5b:64:
35:dd:e1:89:6c:d7:61:1d:26:b4:6f:e9:a0:bc:f2:93:49:c7:
d5:6f:81:3a:2e:09:95:a7:1b:1c:cb:36:9b:bf:68:96:e7:cc:
a6:70:cd:cc:67:af:6f:15:02:b8:bd:3b:4c:f8:0d:c0:6d:a6:
19:fd:c4:f7:a0:bc:65:74:69:01:2b:f3:37:66:4e:86:bc:cc:
b8:cd:69:63:42:2e:20:c7:1e:ae:43:5e:4f:ef:a6:62:9f:43:
47:a9:29:5d:8b:a6:9f:03:be:ee:2b:55:f7:08:5b:27:92:df:
d1:43:c9:71:aa:a0:05:44:99:56:e9:3a:52:f4:2c:1d:11:03:
f7:3c:14:19:7b:9a:5e:20:2c:1b:c7:8d:0d:cf:17:da:cd:8f:
cc:e8:09:73:85:3b:9b:0c:88:3b:f2:06:ee:43:c8:7e:ef:6d:
82:e9:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:30 2025 by rpki-client