Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: K7039lk/9TPkm/h456FqgH0j0O3gNu8s33ZLyvsGmB4=
Subject key identifier: 15:D0:5C:85:5E:B5:AD:15:A7:42:13:C9:39:C0:58:EE:81:26:92:6F
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019849D3529E9841B0639C377AB376129280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: +IfdTJx2CzoPoVOMDvhk55W4TUELgqaeyz+hPkcgylA=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:52:9e:98:41:b0:63:9c:37:7a:b3:76:12:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=15d05c855eb5ad15a74213c939c058ee8126926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:8d:7b:d8:bc:62:5e:b9:a9:7a:fd:dc:84:
10:e1:07:84:f5:f0:e5:25:f8:e2:f9:22:24:c3:fb:
66:b1:9b:b7:4c:35:9b:65:66:ab:f3:e3:e6:3f:b9:
86:e8:4b:79:c1:f2:dd:68:f0:e3:60:b8:d7:66:a6:
fd:aa:07:72:28:b2:a2:1b:9f:34:38:91:be:89:43:
14:9b:3d:71:85:e3:f7:e6:49:75:08:51:91:ad:f1:
c8:18:d7:7a:70:bb:01:08:4f:ac:54:00:c1:4a:96:
fd:8c:50:35:74:32:eb:45:ce:58:e8:56:23:4c:7e:
eb:fe:35:4e:d7:4c:20:9f:e1:04:a6:cb:8e:f9:e1:
5d:e3:37:55:60:ce:34:4c:5a:b9:78:65:fe:d0:77:
79:0b:07:00:54:37:8e:32:0f:a6:b4:1f:17:17:0d:
64:ba:5a:4b:15:df:a9:99:ae:02:cb:ae:51:af:dc:
fa:dd:b3:f5:e9:e5:c0:dc:ef:74:ef:c4:86:b1:c2:
17:b5:8a:18:d6:b1:e8:dd:66:ae:ac:39:3a:fe:f8:
d9:53:a4:9b:2b:0d:a2:ad:53:1f:c4:6e:36:2f:cd:
f2:c4:2d:b8:03:11:5e:16:3b:ae:ea:95:82:71:dc:
f6:e4:89:00:ed:36:23:58:48:7e:08:76:f3:8e:0d:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:5C:85:5E:B5:AD:15:A7:42:13:C9:39:C0:58:EE:81:26:92:6F
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:74:36:d1:50:d5:85:f6:cc:8a:cd:fd:f1:52:70:81:9a:
10:ca:ec:3a:b2:79:c2:3f:cc:e8:3d:86:81:53:40:ba:79:c9:
e6:ff:53:19:d2:e4:84:e9:cd:1f:fb:24:67:83:d1:99:bb:97:
05:ac:1e:02:a3:0a:a4:3f:ca:83:88:81:ac:e5:70:93:da:17:
29:4f:99:db:4a:07:50:25:59:d5:07:f1:3c:ca:d7:91:c1:91:
68:8c:eb:bf:7e:3d:18:84:d9:40:43:d6:4d:fc:bf:70:44:aa:
8d:e0:ad:00:7e:af:d5:08:a8:ac:79:da:4c:34:8d:7c:e3:7b:
9e:81:df:7f:d7:d7:0c:88:a4:11:b4:7c:84:b9:47:eb:f7:48:
9d:cd:d6:2f:46:93:6d:24:17:c5:66:7a:ee:f7:ab:1a:e8:83:
c7:43:f8:c2:49:a3:74:0d:19:02:c3:7a:5f:d3:67:5a:4c:c9:
16:99:cb:e2:08:f5:1d:aa:95:f3:ba:a4:63:ee:39:85:34:a8:
79:19:01:48:96:5b:f1:8b:81:d5:9a:6f:a5:cd:f9:eb:58:40:
5d:27:92:f5:2c:18:47:f8:b3:7d:7e:65:cf:6d:51:7f:6e:62:
9c:af:60:a3:0e:e2:d3:2f:32:6c:1a:cd:bb:08:ba:f4:16:94:
5c:eb:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:29:38 2025 by rpki-client