Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: ln2ETENGKoCEgb29nfYi15NTktf8F788awwvAMnaasE=
Subject key identifier: 7E:38:85:BF:20:47:1D:0C:A8:36:7F:B6:6A:63:9C:E5:E1:44:F6:C4
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 0197CCBAC5D9B28436CF1D08763E46A7F510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 20:01:21 +0000
Manifest this update: Wed 02 Jul 2025 20:01:21 +0000
Manifest next update: Thu 03 Jul 2025 20:01:21 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: oFnwyiVIIGWS9qqeyDwi5kclatOYCsHGvYPILEMwNw0=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:c5:d9:b2:84:36:cf:1d:08:76:3e:46:a7:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Jul 2 20:01:21 2025 GMT
Not After : Jul 3 20:01:21 2025 GMT
Subject: CN=7e3885bf20471d0ca8367fb66a639ce5e144f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:3c:b6:9b:8f:48:6e:10:b4:db:56:c3:c3:
e7:47:98:32:a3:0e:f2:11:5a:06:61:80:a9:ae:82:
b0:66:72:fe:b6:d5:33:54:73:45:5e:f4:b4:7b:d7:
3d:ba:a3:ce:b7:76:42:93:a5:85:71:5c:b9:d8:18:
b5:68:8c:fd:19:10:39:cc:df:13:61:05:69:32:15:
b4:a5:c9:07:4d:c5:e3:02:55:53:4d:0a:77:f9:28:
ba:bf:96:ab:43:fc:bf:9f:7e:50:3a:1d:c2:4d:4b:
d9:37:4f:f3:e8:ad:77:f2:a1:26:12:88:5a:54:c3:
8f:52:e5:5b:09:d8:08:d4:5d:63:54:a1:9f:c9:b9:
7a:33:64:f5:fb:9f:6f:5f:af:4c:4b:84:ff:ab:1b:
b7:57:42:6d:03:f1:ca:7e:0c:49:de:79:40:a8:6f:
b6:60:14:95:5d:d1:48:75:45:c2:79:66:bf:00:a8:
f9:65:0c:07:47:93:26:09:8e:2c:a7:6c:a2:5c:67:
47:42:b2:73:7d:54:97:db:90:06:11:9e:59:a3:bc:
41:9b:5a:7c:17:49:c5:9c:b2:85:93:84:4b:7a:58:
86:9e:2b:ba:0b:c7:c4:7d:1c:a5:07:bc:cf:d7:60:
58:78:86:b6:cc:f6:a9:03:d2:a4:30:60:de:0f:29:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:85:BF:20:47:1D:0C:A8:36:7F:B6:6A:63:9C:E5:E1:44:F6:C4
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c1:ae:4a:17:18:9f:31:70:e6:ad:77:43:57:e2:5c:9d:fd:
81:f6:a7:df:50:f0:4b:24:89:64:c3:0d:6a:c7:71:69:ec:99:
28:b3:d3:5d:35:a5:7c:e4:de:9c:d0:65:c9:05:21:fa:a1:20:
80:d1:f5:41:8a:77:52:2d:88:45:74:71:c1:41:23:40:f4:d7:
e5:ad:cc:64:7e:e8:f9:b7:00:53:0a:39:1b:12:e7:1f:e6:03:
d3:61:f1:9b:04:ad:5f:01:69:a9:c5:f1:d1:0c:e7:c0:e6:11:
05:dc:81:4c:cf:a7:cd:73:19:22:a6:3a:4a:5d:68:70:eb:a3:
d9:af:83:b1:0e:c2:49:c8:4a:25:08:36:4b:f8:bf:93:f2:8e:
12:c3:27:aa:a5:8e:e9:30:8e:95:5d:cb:d5:67:75:9f:ad:98:
73:ae:7d:ce:2c:de:a4:ff:5d:ae:98:31:27:5b:82:b1:e9:3d:
6d:a2:c4:43:19:f8:e0:ce:b9:f8:21:a8:26:e7:99:94:65:4f:
1e:de:83:b0:d7:ba:a1:b3:b6:86:ef:74:ae:9a:f8:c2:86:aa:
1b:b4:8a:ba:13:c6:14:66:5e:ad:2e:0f:18:3f:45:11:89:ae:
51:b6:a3:9b:4c:06:92:32:bd:f3:44:e8:e3:66:09:36:6c:c9:
e1:e3:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:50:35 2025 by rpki-client