Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: Vw3iTbwQgTMoIQPg3zJNBwJVQl70yw5MdlfofnkM1OY=
Subject key identifier: DC:3A:B6:96:82:0E:3B:82:72:8F:A8:33:92:80:8A:17:24:99:23:D3
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 0197B77C53CAD2D532DD97BBA97B1E4C1BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: vM0X3+QT1iaqqiTdzGLS7xM8FvTS+O9v3wViVdJ1xNU=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:53:ca:d2:d5:32:dd:97:bb:a9:7b:1e:4c:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=dc3ab696820e3b82728fa83392808a17249923d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:03:9b:68:ed:ea:29:fb:24:01:84:50:c1:
92:57:ee:89:35:b4:02:73:19:52:f9:4d:24:4f:ca:
53:75:c5:c0:f3:56:47:75:70:62:5f:83:7a:99:6b:
60:80:4d:92:61:5d:eb:e8:a8:75:9a:cb:81:13:d5:
05:da:00:db:b7:78:67:9b:d0:3d:dd:8b:c4:56:b8:
d2:46:bf:5a:1b:6a:c1:7c:1c:88:b4:54:b2:37:3a:
d7:8c:c1:79:7e:f9:e1:a6:67:30:1c:4e:2b:65:41:
7b:cd:4d:a2:3a:8e:e9:df:d7:71:03:10:28:ee:c3:
34:76:3a:32:50:d4:d0:5f:14:4c:d0:b6:84:d3:b3:
c9:ad:b3:bc:a1:f4:ee:57:f7:03:84:84:7c:d8:31:
86:70:e6:76:82:b1:2a:f7:b0:18:e3:5d:5f:89:85:
44:36:66:1c:35:a2:11:63:2e:13:50:74:15:23:9c:
27:a2:79:8c:7f:d2:97:f8:65:39:12:a9:83:64:ab:
9a:c0:92:85:d1:6e:b3:06:65:4f:0b:20:d3:39:be:
24:03:30:20:82:c6:42:42:6f:e5:b8:88:45:4a:6d:
54:e5:b2:7c:12:6a:24:d8:02:60:d5:64:f6:da:12:
37:30:b7:24:f3:db:57:54:2d:f4:99:f2:93:b8:4d:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:B6:96:82:0E:3B:82:72:8F:A8:33:92:80:8A:17:24:99:23:D3
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:ce:26:93:a8:bd:5a:18:63:98:50:5a:6a:c2:c0:45:78:
b1:57:0e:ae:06:cc:79:01:a4:06:97:c3:37:73:32:17:cc:33:
aa:34:d7:ff:71:c7:34:06:2f:76:a9:5b:9d:f3:5c:9e:43:f1:
9b:8a:0e:7c:e8:ef:c2:36:b3:e6:4d:4f:7f:f2:00:db:29:05:
55:70:f9:7a:3b:c2:1a:c0:e1:94:25:18:c6:bd:ed:16:bf:94:
dd:d2:92:ca:ad:f5:b5:d1:59:ba:eb:df:5f:e5:93:9a:9f:f2:
b0:9c:7d:71:be:4b:ed:ed:33:ca:e2:98:85:37:e8:56:ef:af:
22:b0:4a:a2:06:32:1f:fa:3f:78:53:65:1e:49:08:5f:39:14:
f9:79:53:e4:00:38:1d:bf:2c:5f:b1:01:ce:53:9b:58:d8:2f:
bc:82:45:bf:68:ef:85:cf:74:3b:94:68:44:f0:36:0f:4c:35:
38:c5:7a:43:f7:db:da:54:31:e9:72:bb:be:85:79:1c:77:81:
00:e5:c2:cd:47:f3:38:51:41:68:00:9a:6c:02:34:11:e4:2b:
3f:58:8d:97:bc:60:83:a3:33:f7:0f:25:b0:ea:0a:3d:24:f2:
9b:91:14:02:89:0a:1c:ab:40:d5:9e:85:a6:fb:1b:61:bb:05:
97:64:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:51 2025 by rpki-client