Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: L1bUujZRD07gtUUkOJnOwZUJ/5NuUTqWkO6Nk6kpucE=
Subject key identifier: DE:06:A7:35:5A:19:12:AD:28:52:72:CD:28:EB:FE:2F:4C:DB:4B:3D
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 0197BB58F0C6046B9A975DD9ADF68F22F5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1497
Signing time: Sun 29 Jun 2025 11:00:57 +0000
Manifest this update: Sun 29 Jun 2025 11:00:57 +0000
Manifest next update: Mon 30 Jun 2025 11:00:57 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: LrsZtSTWxpPErufEI9clzAoBRrT/lsPOXaxWL55XA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:f0:c6:04:6b:9a:97:5d:d9:ad:f6:8f:22:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jun 29 11:00:57 2025 GMT
Not After : Jun 30 11:00:57 2025 GMT
Subject: CN=de06a7355a1912ad285272cd28ebfe2f4cdb4b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:13:d6:11:0a:0a:94:77:f6:07:ba:9c:59:
93:51:fe:5a:c1:d2:2e:22:af:3e:ae:ff:d4:18:42:
86:1f:08:a4:2c:19:66:bd:4b:bc:b3:33:66:bd:88:
74:21:22:8a:c5:fa:55:dc:f3:1d:b3:cb:43:ce:4a:
e9:3f:0e:c8:6b:c9:c6:bb:39:4d:09:c7:5f:8a:3d:
b6:73:3f:20:79:2a:3d:5b:9f:40:c2:0d:40:48:d6:
5b:e7:a6:f6:49:f1:fa:bf:f1:c3:0a:c6:3e:4c:19:
e5:dc:a6:7c:31:95:39:7e:e0:30:35:ee:f9:77:74:
6a:79:0a:01:95:2d:37:28:31:26:c0:07:40:92:69:
a8:84:c7:f1:7f:ed:ba:2b:b1:95:1c:bb:7a:9e:f2:
0d:cd:a9:de:8b:1c:f7:e0:c8:9f:51:9f:bf:7f:3e:
5f:07:b8:cd:b9:b3:5a:85:50:83:3a:03:06:4e:e1:
91:1b:b0:8f:08:b3:97:cc:f9:1d:9a:95:ce:8c:ef:
aa:0d:3b:31:47:7c:9c:fa:d3:5e:64:99:4c:11:c2:
91:19:b7:15:e2:ee:8c:45:5d:82:37:ea:f3:26:e2:
fe:42:10:5d:75:56:59:66:85:7d:f5:7f:22:2c:54:
c9:a3:b8:cb:35:e5:c1:8f:8e:17:59:7f:bd:df:94:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:A7:35:5A:19:12:AD:28:52:72:CD:28:EB:FE:2F:4C:DB:4B:3D
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:04:9c:99:ca:e2:62:17:a2:32:f3:71:65:be:01:9f:6e:
84:99:e0:40:1d:e5:42:46:ec:65:e4:63:6c:88:ee:d3:6b:47:
87:74:01:10:93:71:08:d0:64:c8:ab:a2:2b:6f:6b:44:c1:c3:
2b:0e:f7:1c:31:b0:55:ea:25:2c:5c:36:71:ea:58:63:7a:e1:
8f:1c:02:a7:80:02:87:82:a2:c9:a5:3d:90:75:38:20:d5:5c:
f5:69:9c:7e:bb:c1:04:e0:a2:63:cb:fd:8d:4d:dc:e1:99:b5:
00:35:70:0a:84:ed:53:11:d2:a5:dc:48:cb:f6:2c:ea:45:87:
71:df:d2:81:78:fe:58:fd:44:56:33:b0:83:12:a4:a2:cf:b2:
f8:c8:23:57:a3:63:91:b9:6e:93:67:f2:f4:ad:d4:dc:08:78:
cf:75:37:30:ad:2c:0f:1a:e5:f4:91:7d:38:0e:4f:be:e9:a0:
16:a8:43:46:1a:7d:4c:f5:ca:50:ec:0a:be:8d:35:79:f7:bd:
2e:15:eb:87:4a:85:8d:53:a2:ae:48:87:d3:7a:01:d7:4a:10:
26:b9:74:e8:9d:21:c8:d0:3b:88:cc:c1:e4:96:9b:47:fa:d5:
39:06:30:a9:3f:95:1c:b2:bc:5d:93:35:c5:60:bc:5d:28:15:
e4:39:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:51 2025 by rpki-client