Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: fR5QctwSMV4LETitR1B+Ooveo8cCnwzDyS7OBBFxTpo=
Subject key identifier: 71:0E:C5:4D:15:D6:60:51:B8:DB:44:6D:AF:A9:28:62:01:A9:DD:14
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 01974AB165DB9A0924E1CC233F8D81E31F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0C29
Signing time: Sat 07 Jun 2025 14:00:29 +0000
Manifest this update: Sat 07 Jun 2025 14:00:29 +0000
Manifest next update: Sun 08 Jun 2025 14:00:29 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: V5q18FArELOaAG9XueNSVHC01tx1G0Aq6sqYvp6ZFKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:65:db:9a:09:24:e1:cc:23:3f:8d:81:e3:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jun 7 14:00:29 2025 GMT
Not After : Jun 8 14:00:29 2025 GMT
Subject: CN=710ec54d15d66051b8db446dafa9286201a9dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:95:3c:c8:8e:73:e2:d2:d5:d7:c8:91:7e:
af:d8:17:3b:b2:0e:5d:51:4e:d4:5a:41:69:3e:55:
d4:1e:4f:49:09:ab:a4:9e:ac:de:b8:01:2c:d1:20:
4c:cf:f1:30:73:f2:df:5b:10:88:8c:f1:8b:76:1a:
30:d5:65:5d:41:a1:d1:c8:23:6b:b0:a7:2b:f5:f6:
38:28:54:0d:b5:a1:3b:3f:a9:3c:9a:b8:7d:0b:48:
a8:08:6e:0c:45:51:38:4b:fa:8e:55:e2:0a:72:ac:
6a:60:3f:23:be:1a:74:a9:f8:a8:43:4c:58:c0:96:
63:00:8c:6e:26:64:b8:94:42:85:74:00:6c:bd:72:
3f:3b:e0:d0:13:19:2a:ae:40:6d:b8:6b:83:56:31:
ff:c7:54:21:e2:1c:12:7a:83:82:06:bf:17:42:7c:
56:36:6f:a5:c6:e1:41:04:da:8d:f6:25:52:35:c2:
64:e0:a8:4c:c4:4f:b7:df:f9:d0:f1:34:81:7b:78:
9f:dc:7a:0f:7c:b3:c1:e3:3d:34:b9:ec:95:08:35:
56:1e:9e:f6:4a:ff:30:2d:36:c9:ba:34:e2:48:5b:
58:91:d6:64:c8:6a:8f:e5:9d:ce:8c:e8:04:ad:ee:
e8:35:8c:ab:42:fb:de:1a:5a:5b:d6:56:75:2a:37:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:C5:4D:15:D6:60:51:B8:DB:44:6D:AF:A9:28:62:01:A9:DD:14
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:9b:53:49:44:0b:f1:2b:ce:ef:e3:9f:bb:02:33:98:2d:
e5:5c:e4:60:b8:14:4e:17:2c:50:c9:b6:97:69:fe:25:40:71:
05:47:08:14:0e:43:f3:1b:20:1a:c4:32:74:9b:a1:24:89:24:
ce:80:ab:e6:44:f5:ad:9e:d5:dd:13:a6:82:c5:3a:05:03:df:
bc:41:e5:b2:58:9c:e6:cf:5a:27:8e:bf:ee:bb:b9:fc:8a:06:
9e:50:c9:57:be:91:b0:85:df:58:70:27:f4:88:0b:40:0a:c4:
aa:ff:c1:f9:91:31:bc:eb:3a:27:10:c8:d0:81:46:1a:58:97:
3a:b2:10:44:e8:90:7e:f6:1e:62:dd:e5:e9:8e:a1:fe:57:f1:
8a:3f:8a:8a:80:c4:f3:f8:0f:e6:b0:84:2f:85:47:14:75:a2:
e8:95:19:32:07:a9:58:dc:45:30:03:d7:27:cb:dc:c9:51:db:
4d:03:1e:40:fd:62:c8:cc:e0:c4:1b:21:fe:8d:d4:30:5e:85:
3b:0a:b6:37:39:65:ba:a3:a9:10:c6:07:d1:e5:4a:87:25:d0:
a2:0b:31:0a:d8:87:a3:1a:40:ff:79:dc:b1:d3:3e:2a:6a:13:
50:f0:4c:b8:ba:51:8f:2b:99:07:f0:0e:b8:37:a7:39:99:6a:
21:70:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:12 2025 by rpki-client