Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: wAxRHR6KmzDBrXpkZkacEqHjtGpxhzQe96RQ8VL/kSQ=
Subject key identifier: 34:49:90:5A:5A:D0:F4:75:E3:43:AE:2D:1B:0D:E9:C3:04:DE:FC:88
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0197B890913A945F117E19ED64D7419E5E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:02:51 +0000
Manifest this update: Sat 28 Jun 2025 22:02:51 +0000
Manifest next update: Sun 29 Jun 2025 22:02:51 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: PLf+BfvPRV+fwGqZL71MkB8qaoCZb50VuuyKDf5CVBM=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:91:3a:94:5f:11:7e:19:ed:64:d7:41:9e:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jun 28 22:02:51 2025 GMT
Not After : Jun 29 22:02:51 2025 GMT
Subject: CN=3449905a5ad0f475e343ae2d1b0de9c304defc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:d7:ce:c8:be:e1:67:ec:a0:22:6d:fb:a9:
0b:36:f7:f2:c6:04:61:82:cc:ab:a4:dd:98:9e:56:
0f:f0:fc:07:9a:d3:0c:66:72:40:cc:cb:74:d2:36:
80:32:0e:2a:e7:8b:3b:5d:0d:48:83:76:2e:d3:0c:
15:c6:54:ee:df:23:4b:69:b5:79:73:05:35:ef:08:
c6:8d:41:5b:94:8e:7e:5e:c2:70:ae:1c:b1:c8:ad:
ff:db:86:eb:27:18:97:7d:1a:7f:0d:fb:51:4f:23:
44:d1:5b:81:b6:4a:f5:56:7c:9e:71:21:90:2e:57:
be:64:e6:3e:0a:7d:28:08:d8:d8:99:80:68:6b:7d:
b5:7c:8e:a5:5f:76:1e:83:70:e3:c5:01:57:81:7d:
84:bc:83:fa:bb:30:d0:7c:0c:83:95:44:11:6f:8e:
23:60:90:c9:e8:d9:07:2c:99:0b:1e:12:85:8a:e8:
f6:85:8b:a9:30:ee:71:dc:fb:0b:7d:3f:c0:5c:5b:
72:1d:17:cc:52:33:54:aa:48:75:63:53:31:a9:d1:
8c:74:a6:9e:b5:e5:ec:17:46:eb:42:05:f4:1d:92:
41:1c:25:24:80:a1:1a:8c:7f:fc:e8:db:1d:4e:bb:
d7:e5:5d:37:0b:d7:fa:84:af:94:99:b9:e0:d2:d0:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:90:5A:5A:D0:F4:75:E3:43:AE:2D:1B:0D:E9:C3:04:DE:FC:88
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:83:2b:a9:e7:06:d5:d3:a4:86:d7:b5:b8:62:c7:fb:f9:7d:
b8:94:54:77:05:65:f9:22:cf:cf:2b:bc:2d:3e:10:76:6c:68:
89:8c:a7:7a:52:d0:08:31:ab:45:18:f9:eb:e4:fa:bd:32:94:
b4:10:61:5f:5d:74:01:b9:65:82:fd:9d:18:08:4c:be:d1:65:
40:91:25:90:23:fb:be:8b:a7:f0:49:40:b9:72:16:1f:b6:3e:
fd:6d:67:74:b0:41:7c:e4:2a:28:72:24:26:4d:c0:18:4f:db:
01:66:48:ab:69:19:58:d8:ef:f3:3d:ce:5d:a6:38:c6:5a:11:
41:17:e4:c5:d5:ac:54:30:c7:5a:10:1c:ab:bd:32:93:89:68:
be:f0:d7:46:93:df:73:d3:10:2a:a9:5f:3f:92:31:33:27:93:
df:ec:37:ff:6d:92:6d:a0:e8:a7:16:4d:9a:6d:86:c4:c9:85:
4d:83:6a:ef:57:d7:d5:3f:8c:68:9a:74:d9:df:6f:32:a5:d2:
19:32:10:97:91:51:89:12:28:0a:a9:ae:2e:59:2e:c0:18:b9:
f6:59:ee:ef:3f:0b:b9:a7:02:4b:30:e3:8e:20:2c:a2:bd:0d:
3d:19:36:f3:7b:81:f2:47:e5:67:40:63:58:31:97:a6:de:70:
99:a1:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:53 2025 by rpki-client