Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: irENhg54bmAwhj+PwecLssCdtx72KyGXMnsUDQ6lEvg=
Subject key identifier: 8D:36:BC:A9:BC:F2:8B:A6:F3:15:C0:53:E6:89:F9:E5:44:FA:FD:33
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 0197B70E6951C6855513EEDFE5A53CC3B4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: UEU00o+XhrOQZBy2Eke/Eg/BBofddvaq+OmASdvtykA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:69:51:c6:85:55:13:ee:df:e5:a5:3c:c3:b4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=8d36bca9bcf28ba6f315c053e689f9e544fafd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:1d:3a:1f:8b:d6:f5:5c:8f:f4:99:56:40:
eb:1d:59:1b:ea:2f:57:fb:c0:f5:cb:ae:5b:3b:7b:
f9:b6:a3:56:b2:ad:44:09:c5:46:0c:af:03:d2:59:
59:b9:7b:03:c2:f5:5e:f9:a0:f5:24:46:0c:39:a9:
fe:34:10:bc:29:0f:0b:8e:21:fd:65:74:8f:eb:f1:
3a:4f:e0:52:ae:01:e9:f5:05:ce:ca:6a:34:99:7c:
1c:a3:3d:2e:c6:dc:c0:bd:43:29:e7:cb:22:2d:bb:
d5:68:1c:38:2d:01:93:7e:f9:6f:c1:1e:7e:47:92:
71:65:31:7a:8f:80:71:b9:f0:9a:f5:68:d1:21:8d:
b4:89:38:2b:eb:bf:f8:3b:a3:6b:29:21:11:ee:13:
64:ce:e5:27:45:8d:f4:ed:1b:1b:e0:f8:2f:31:dc:
58:26:ac:3b:bb:6f:40:bc:6c:ac:ee:e9:b0:4c:b0:
3d:cb:50:62:49:5d:30:88:51:91:b7:0c:5c:f1:bf:
9e:4c:64:0e:a2:f8:e1:f3:6e:90:1a:b8:51:c2:75:
b8:ac:65:bc:4a:41:d5:85:3d:b3:58:77:38:08:f8:
40:f6:3e:d3:3d:36:c3:0a:98:55:23:7b:1c:3e:cb:
06:66:0f:a6:98:ef:95:a0:74:37:5d:c2:8a:c2:e7:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:BC:A9:BC:F2:8B:A6:F3:15:C0:53:E6:89:F9:E5:44:FA:FD:33
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:9a:1b:91:d5:98:31:b5:5b:7d:d2:47:fa:e4:7a:5d:78:
13:c2:83:15:c1:7d:d6:4e:96:f0:e3:4e:76:d0:06:69:74:6d:
7b:dd:55:8b:ae:c9:16:c7:69:2f:f3:37:6c:8b:f0:70:46:4b:
5a:5b:b3:ad:b8:1d:ab:7a:d9:aa:4b:08:94:c0:e5:9a:32:f4:
fb:ca:47:4e:14:02:26:50:77:e7:78:3e:af:26:83:44:31:08:
dc:1c:6b:88:4b:6e:43:0e:84:7c:a5:f7:b3:28:d4:70:bf:43:
cc:5a:36:ae:66:ef:f1:54:7c:ac:63:c8:b5:46:80:27:88:fd:
a1:47:3d:37:eb:ea:1b:08:87:ef:9b:c3:54:64:43:49:4a:e1:
95:2b:8f:ee:d3:4c:28:bf:3e:d1:f2:8c:9e:fd:37:89:d6:50:
c9:05:ea:f1:6b:46:8f:ff:b8:ac:82:51:35:25:bb:5c:fb:f3:
6d:e8:c4:10:9b:41:7d:86:dd:8d:33:f1:a4:4d:ac:f4:e9:bb:
8c:ae:69:b4:1b:32:bb:04:41:45:fd:c9:9a:43:7f:ef:cb:93:
72:db:c3:de:a5:71:9a:ae:5e:0e:fc:96:1d:02:07:47:f1:0f:
b7:57:7c:9e:65:aa:24:31:a2:9f:b8:8f:f1:f9:be:2b:3f:5e:
7a:b6:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:30 2025 by rpki-client