Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier: 9C/4cy3fdmrvARMSTAE71VwIIsRq7AhY8AOmLWNHfGg=
Subject key identifier: F3:56:F2:72:E0:0C:97:90:A0:05:37:C0:CF:2E:0D:A3:EB:73:3D:50
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 01974742796FCA93FDA1DEEFECF26DA489D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 22:00:27 +0000
Manifest this update: Fri 06 Jun 2025 22:00:27 +0000
Manifest next update: Sat 07 Jun 2025 22:00:27 +0000
Files and hashes: 1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=)
2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: i7NbaNnS5iDzipUnQRIdDfANt+S+t3MaSWY7h2GBD6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:79:6f:ca:93:fd:a1:de:ef:ec:f2:6d:a4:89:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Jun 6 22:00:27 2025 GMT
Not After : Jun 7 22:00:27 2025 GMT
Subject: CN=f356f272e00c9790a00537c0cf2e0da3eb733d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:33:63:f2:c5:7b:db:44:a4:8a:21:37:8e:
4b:54:08:cc:0f:c5:c7:11:b1:35:a0:84:d3:cf:a9:
04:00:6e:2c:6d:10:08:02:d5:18:e8:c1:e3:7e:e9:
98:e1:46:0e:0c:40:46:23:a5:a2:d4:b2:00:00:49:
69:36:61:d0:85:14:9b:ff:75:1a:79:62:1d:f7:2d:
fc:e5:b2:29:b3:e0:7f:f5:1a:4f:c6:23:59:4f:d6:
5f:de:f3:03:90:e5:74:a9:be:c7:9d:15:d6:f1:2d:
2f:e3:fc:16:79:db:c1:d8:1c:60:4c:8f:1a:78:5c:
47:d7:e0:f8:89:19:bf:43:9f:20:7a:ec:cb:14:8f:
f8:12:8f:ee:6e:74:2b:3b:55:3f:d4:2a:a5:5e:21:
91:47:f7:54:3c:01:b8:21:c2:17:47:c6:fa:ed:ce:
81:25:ce:86:ac:41:77:d1:38:75:8a:11:7b:d4:2d:
fa:3e:54:01:32:83:bd:b4:0b:e3:d8:05:d4:55:19:
cf:8a:a9:7c:61:10:e2:6d:f7:e4:0a:28:d5:ae:0a:
38:82:33:eb:8d:5e:22:1a:7c:20:f8:f7:69:6f:22:
fd:9c:e9:15:a5:7b:72:e2:d2:2d:83:88:ea:ad:2a:
16:bb:cf:2d:2a:fe:36:97:3b:8c:d5:7d:a0:4e:4a:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:56:F2:72:E0:0C:97:90:A0:05:37:C0:CF:2E:0D:A3:EB:73:3D:50
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:ee:52:37:d2:92:6b:5c:10:e3:35:10:ac:94:a8:8a:6e:
35:2a:c0:c4:23:23:f6:e0:d1:08:85:d4:08:ea:ce:cf:a0:07:
c0:61:9f:5f:ae:5d:66:5f:c0:31:bb:0f:39:97:48:c4:c5:b7:
68:ff:57:fd:69:75:a7:2f:24:72:f5:c2:4b:e8:0a:ff:10:ad:
9e:01:f2:d7:48:06:55:f7:4b:29:18:a4:07:99:4d:b3:f1:b0:
fe:d2:6c:9c:53:c3:e7:31:df:cc:53:ae:8e:79:9a:6e:29:c3:
bd:d3:bd:48:34:6b:ca:e4:fc:a0:0f:24:1a:2b:74:e0:3e:08:
fd:66:81:34:84:2d:80:00:6b:e9:72:85:00:52:a7:df:1a:fd:
77:cf:ef:e3:49:cc:d4:72:70:f1:8a:8e:71:b3:de:85:77:5b:
c4:99:c5:61:95:c5:f5:a3:84:e1:05:cf:25:75:ec:aa:88:47:
88:a2:50:56:6b:d6:8e:40:83:b3:48:0a:08:f8:27:8a:8f:cf:
03:24:98:d3:6a:9e:83:89:38:f1:a7:5e:bc:a5:39:30:9b:4c:
b1:61:70:b6:50:d6:60:c9:06:8f:e3:c2:9d:81:4e:83:d8:3f:
a8:23:ae:c6:1d:d0:bc:f6:40:90:ba:ca:14:1c:ae:c1:5c:f7:
04:aa:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:51 2025 by rpki-client