Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: TGQ3G810i7yJ0VtOC55eCvekPSHxnH5ykIK6fTHHodA=
Subject key identifier: 21:4A:D8:91:EB:03:69:DC:62:FE:F7:AB:E1:B1:66:14:74:BB:D7:99
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 0196C1944A68F77A1C7040B0E563DCA76C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 23:00:43 +0000
Manifest this update: Sun 11 May 2025 23:00:43 +0000
Manifest next update: Mon 12 May 2025 23:00:43 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: LFZdfvQ0caozkMA2g2bIMda/HzIllLHWaMmm4xJwTpU=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:4a:68:f7:7a:1c:70:40:b0:e5:63:dc:a7:6c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: May 11 23:00:43 2025 GMT
Not After : May 12 23:00:43 2025 GMT
Subject: CN=214ad891eb0369dc62fef7abe1b1661474bbd799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:fc:b7:c3:fa:52:d8:62:9f:13:29:eb:f8:
81:68:dc:ec:c3:33:13:c1:c1:d5:bb:a9:f6:34:51:
d4:68:8d:f9:7f:30:e8:ad:0a:b2:75:8f:c5:c7:c5:
17:17:5a:2f:bf:89:e4:02:38:10:0c:c7:63:79:fb:
f9:af:93:e8:70:8f:07:32:86:f2:0b:1b:15:d6:8c:
d6:64:c6:17:ea:3b:84:4d:e5:2f:6d:21:0f:9e:7b:
49:4a:18:54:ec:de:f9:8a:23:60:56:a6:1b:aa:e4:
a6:a6:9e:7f:71:8f:b7:86:39:d3:13:0b:61:9c:9e:
cc:bf:8d:f0:70:00:5d:b7:78:23:be:b6:67:dc:67:
d6:41:0c:da:de:55:da:ac:fe:bb:73:75:a3:8f:8f:
04:97:b6:54:d9:2a:fa:48:ba:09:1a:f7:f7:8e:ee:
f8:43:9a:36:8a:6c:52:26:0c:0e:5f:b2:28:9f:37:
2e:f6:5e:3b:27:83:d0:2f:cd:cc:7e:d2:7e:e2:69:
02:bc:a2:f6:27:d8:ec:c7:86:e6:a3:a9:51:7d:5a:
78:c0:30:a5:7d:42:7c:a5:0a:fa:6a:fe:76:2a:5e:
79:83:6c:15:9e:d1:84:d1:d3:1a:95:2b:e6:bc:06:
48:0b:6e:58:69:d3:78:1a:ea:ce:36:35:a5:7e:e1:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:D8:91:EB:03:69:DC:62:FE:F7:AB:E1:B1:66:14:74:BB:D7:99
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a3:81:e1:1f:a8:2f:45:ca:35:e8:fb:e3:5d:6c:a5:e0:1b:
b2:6b:8b:96:78:e4:db:03:40:3b:19:82:db:5c:d3:fe:b3:90:
1e:94:9e:d5:6c:20:61:ee:9e:b1:7f:d0:85:a6:0a:c4:c8:1d:
ce:5c:28:7b:33:08:ae:b6:d4:5b:f9:90:51:f3:59:a9:89:e7:
44:43:e2:8b:42:5f:c1:dc:87:c9:22:71:48:83:26:fc:1e:fa:
47:cc:53:c9:11:96:be:a7:02:bf:06:13:d3:4d:df:bc:eb:1a:
2f:7f:79:64:ee:c9:a3:8e:f2:65:da:40:2f:5c:fc:3e:41:c4:
8b:a2:b3:c8:36:87:23:fe:dc:86:82:15:ef:f3:5e:d9:bf:1f:
c0:9b:0c:8b:43:34:62:14:13:1a:54:5a:af:cf:c7:7e:4c:ef:
a4:b0:e2:12:72:68:cc:70:ae:f6:06:52:f4:30:54:12:42:39:
5b:f4:b3:a3:e7:c1:71:1a:db:41:4b:41:6e:22:83:fe:84:8c:
e0:4f:a7:4f:1a:04:19:95:70:83:cc:36:93:66:ca:e1:61:d5:
5e:70:21:3c:0d:8c:61:6a:c7:33:c5:25:c4:b1:67:e1:4c:be:
4c:19:1d:53:65:d8:4b:f8:d7:79:03:8f:7e:58:25:2c:e7:89:
30:1c:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:19:25 2025 by rpki-client