Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: zjdWVo5PKIjqn4kU2s/HoLJU01o6rq0sfKyIt9EUGwc=
Subject key identifier: 15:55:63:E7:19:41:4E:BF:66:27:0C:D0:82:D1:20:23:B4:83:3F:47
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 0197B6A19AC559524324AA05BAB8BAC66DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: 25b6/jyOsYqv8cQsT+VdrGBNQ4gj0aMv+DZgHg0UlCQ=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9a:c5:59:52:43:24:aa:05:ba:b8:ba:c6:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=155563e719414ebf66270cd082d12023b4833f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:15:4d:78:05:0b:71:d3:62:42:a9:24:36:
bd:7c:5b:72:26:f2:9a:b5:8d:31:f5:7f:6e:46:8d:
99:16:e0:d5:59:db:5f:e5:94:fa:32:b4:d1:17:c7:
57:fc:71:92:50:32:20:c2:24:8b:a7:f7:1e:55:3c:
db:fe:45:c6:c0:bb:c7:b5:21:26:8c:13:08:27:14:
31:67:1c:6c:a3:5e:58:0b:28:c8:bf:6c:e4:0a:f9:
8a:ac:3d:79:fe:92:e1:43:a5:78:80:b0:e6:e1:23:
9b:1e:09:80:c4:0e:9f:af:c2:45:8b:31:d3:ff:b4:
b3:38:aa:ae:12:50:91:44:06:42:11:e5:88:1a:72:
9b:20:70:f6:6a:09:79:8a:29:62:a7:23:a0:11:2b:
45:58:90:3f:cb:26:77:bf:38:e0:dd:5c:c8:18:85:
76:1a:cd:3f:46:1d:31:42:d9:14:4d:cf:0f:ae:7f:
a9:94:e4:f2:82:93:a4:52:6b:84:b0:55:a6:08:7d:
de:fc:3b:c5:9f:f7:35:95:3e:c7:46:1c:8a:b0:33:
fd:4f:c2:34:97:9f:2a:ca:e7:a5:f7:de:33:ba:54:
4a:22:be:82:23:8e:67:c2:0d:09:a5:63:6c:79:c5:
bc:b3:8e:45:69:49:74:f6:94:d2:60:97:f0:a4:e9:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:63:E7:19:41:4E:BF:66:27:0C:D0:82:D1:20:23:B4:83:3F:47
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0c:69:37:e8:26:df:d9:d4:6f:4c:71:48:ab:23:15:47:88:
e3:d7:c4:f4:55:e3:c0:b2:0c:78:f3:4d:93:44:33:04:a6:a7:
61:ab:ed:06:df:8b:b6:30:12:7c:00:86:e7:c1:2f:33:4b:2e:
4f:b9:53:33:91:dd:c0:ea:89:7a:e7:ed:47:5c:f1:89:5f:73:
14:c8:c7:8f:1f:76:c7:ae:3d:6c:f6:61:75:34:51:27:9f:bb:
2d:26:11:c8:3b:fb:3c:a8:95:64:f2:1c:46:0c:1f:4b:4d:68:
90:f8:52:29:4a:ea:8f:39:f6:ff:9c:0d:b4:2d:c1:bd:48:92:
68:28:e6:26:95:b9:7e:e0:0b:72:6f:9a:e6:62:00:79:6e:86:
a2:5c:71:77:b7:d6:b3:88:cc:7b:32:a7:b6:f8:86:69:a8:ed:
59:49:09:e1:93:d2:13:cf:74:e3:d4:d9:4e:e3:34:cd:8b:57:
36:02:aa:9e:1a:ce:a5:f3:85:5a:ec:6b:ce:10:3d:a0:18:34:
da:00:79:08:a8:13:4e:ef:e4:12:9f:15:04:51:a0:c9:1b:a9:
91:e3:b0:0b:ef:83:dc:9e:46:cc:de:bd:60:45:b6:7c:db:8d:
07:fd:4b:d7:69:bb:4f:a1:54:e1:cf:12:7e:a4:5a:36:70:a6:
1d:80:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:58 2025 by rpki-client