Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: JLQiFj2ogUDR6PUkSlh9dfZJQVtr0k2tjHrhxDbM2D0=
Subject key identifier: 2F:38:A7:BA:AB:A1:29:9D:60:A8:FE:DA:91:E0:D8:AE:D3:6D:C0:F1
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0197B632D3A480B23649C9E8F9A4A0483820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: cloAgCFXuJnqEZ0PstnXg9SOYXQfAik3p/Xs9fcF79w=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d3:a4:80:b2:36:49:c9:e8:f9:a4:a0:48:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=2f38a7baaba1299d60a8feda91e0d8aed36dc0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:d0:a6:44:db:6f:0e:43:52:c1:aa:8d:10:
50:a1:0e:ba:37:fe:6b:e9:12:90:f5:a5:54:ff:c7:
55:eb:8b:cd:ef:55:5f:1d:17:fa:36:18:79:a1:82:
44:d1:91:a6:39:75:4b:c1:ed:a8:50:98:57:a2:26:
b1:2a:b8:3c:59:d2:ec:3e:7a:8b:0c:6f:b8:12:23:
b0:97:8e:f8:d2:73:9d:12:b0:c3:ce:47:e3:c6:2a:
84:65:5c:9d:48:d1:ab:ee:4f:c3:8c:4c:45:e9:48:
65:c9:df:a6:03:76:81:3e:a5:37:87:01:eb:4c:f4:
bb:3e:19:d2:ce:e4:ec:9e:55:e9:6a:f0:68:fb:c1:
e3:a3:1d:59:e5:76:18:18:f4:2d:2e:01:8c:d9:52:
a7:4d:65:cb:77:fb:66:48:72:a6:04:a3:8d:94:12:
32:95:93:3d:1f:3c:ba:d6:ed:d2:7d:4e:63:77:25:
e9:f8:6d:cc:46:20:4c:da:e3:97:8d:a1:ca:cc:09:
eb:f0:0a:9e:d0:c6:af:a9:ea:f0:ae:91:4d:56:42:
c2:ad:74:24:aa:74:d6:6c:55:97:10:97:66:f1:25:
2f:ef:9a:97:b9:43:29:06:71:fd:53:e4:37:02:a8:
15:e1:3d:31:b6:ec:9a:14:a4:b8:46:5b:ae:42:e6:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:A7:BA:AB:A1:29:9D:60:A8:FE:DA:91:E0:D8:AE:D3:6D:C0:F1
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:cd:aa:6a:96:b4:bb:64:db:27:81:2d:6b:c2:95:0e:9e:9b:
63:e7:3d:8c:06:89:20:75:12:2a:65:02:40:c7:f9:79:20:4d:
2b:78:a4:56:a0:11:f3:85:0f:01:d0:8d:0e:3f:33:d5:88:2f:
af:59:f1:02:8c:e0:af:d5:8c:d2:f7:36:36:c6:67:6f:8b:df:
9c:1e:e9:6b:3c:0d:e1:0d:01:4f:da:65:a0:80:49:41:90:18:
36:a3:fa:53:fe:ff:6d:42:55:46:1c:46:02:6e:db:cd:1d:1c:
24:ec:ce:a9:4a:47:9d:35:31:f2:cb:23:8f:69:ad:eb:ab:ef:
3c:75:df:13:72:2d:db:fa:e1:67:3a:5a:a6:2e:1e:c5:20:5b:
af:29:43:ff:3c:68:66:6b:8a:5f:03:84:12:93:d2:4b:de:82:
30:6b:99:6a:42:95:53:5d:0a:51:d4:50:6c:72:48:13:1d:a0:
50:0a:1d:7d:80:66:81:8d:cf:be:b9:e8:1b:5c:ad:aa:ec:ca:
36:98:30:da:44:90:37:77:fe:37:80:6a:e6:69:20:38:93:b3:
fa:51:6e:68:01:43:55:26:f8:68:a5:5b:84:7b:43:b1:cd:67:
1e:a5:25:83:2c:72:a8:2f:1e:db:6f:c8:62:a9:09:8b:2e:a6:
57:eb:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:55 2025 by rpki-client