Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: UcvYtGMc6I/qyoU9IyYQqZKi2TbZ2CfYE5d3tsIl9Tw=
Subject key identifier: 7E:DA:D1:FE:92:19:B4:05:8C:20:86:15:2A:66:E6:EB:32:A2:FA:5D
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 0197463034982E9F309C3C1E9BD8DB56DE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 021B
Signing time: Fri 06 Jun 2025 17:00:53 +0000
Manifest this update: Fri 06 Jun 2025 17:00:53 +0000
Manifest next update: Sat 07 Jun 2025 17:00:53 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: zWhPgmmq7cfK+tvn/yaPbo256vb1+t4JArtSahOPn7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:34:98:2e:9f:30:9c:3c:1e:9b:d8:db:56:de:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jun 6 17:00:53 2025 GMT
Not After : Jun 7 17:00:53 2025 GMT
Subject: CN=7edad1fe9219b4058c2086152a66e6eb32a2fa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:9a:0d:31:03:fa:11:aa:d4:dc:77:9c:98:
bf:fe:31:dd:3b:67:c0:45:92:a0:32:cc:37:9e:9e:
83:ba:29:cb:76:86:0e:4b:a0:f5:1c:1e:30:0c:a0:
09:82:92:13:c1:1d:cc:99:09:7d:ce:27:02:60:01:
19:f7:9a:36:cd:74:fc:8f:e3:e5:4d:ce:fc:65:57:
2f:5f:3e:ba:be:5b:55:cb:f3:02:fc:db:88:9d:8c:
63:84:b9:7b:ea:17:67:ed:33:7a:0b:00:63:7f:b3:
ba:ee:25:56:8c:d4:11:e2:d4:81:51:b6:d1:e7:cb:
8f:9d:54:cc:53:33:a5:6e:01:30:05:a1:96:3a:41:
d6:46:ce:39:e2:48:6d:0e:74:fa:20:86:b9:d4:f0:
6b:2a:3c:d7:aa:3d:e3:90:f0:f4:1d:1a:ce:19:60:
d2:69:43:e2:8a:32:5e:68:50:72:25:42:41:cc:8a:
7b:2c:56:91:0f:28:9f:68:c1:f8:fa:20:3f:e1:f9:
39:08:c5:d8:96:b6:f0:ff:17:a9:b5:6c:4d:3b:f7:
80:66:83:11:fc:51:8a:53:25:0f:87:1c:b6:1a:c5:
fd:e0:bd:f9:4f:85:b3:8b:19:b3:7d:46:97:fe:20:
04:01:88:7f:36:55:0f:37:2f:91:79:02:3a:19:a0:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DA:D1:FE:92:19:B4:05:8C:20:86:15:2A:66:E6:EB:32:A2:FA:5D
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c4:de:1a:76:62:70:fc:4e:2d:7a:c0:df:de:de:af:4d:f5:
e5:3f:9d:54:45:19:b8:5d:c5:f1:b4:dd:66:19:7a:e4:0e:bf:
ec:0d:b8:a3:eb:ca:95:a5:dc:12:36:95:ea:a3:95:c5:32:7a:
4c:2e:5a:3c:ba:96:8f:89:05:fa:ad:68:88:e6:f6:ef:64:9e:
f0:3e:40:5e:9c:68:88:35:e4:4a:16:c0:f6:e4:f0:12:bf:d1:
35:d2:fd:d3:c5:69:27:5e:f8:7f:f7:52:9b:f2:3f:a9:0e:2e:
e1:d3:04:7b:9e:84:be:52:b4:0d:b4:0a:8c:72:75:44:7d:72:
be:73:0c:13:53:8d:11:77:4d:32:cf:ee:15:53:ab:3c:91:59:
93:d0:60:eb:2b:c9:d5:28:95:eb:59:98:e5:73:57:78:c0:e7:
6e:37:d4:aa:ce:3f:dc:70:b4:0c:41:24:ed:23:df:63:0d:80:
04:51:14:e4:ec:ac:c9:51:ed:18:50:5c:23:4e:87:03:c1:c8:
52:fa:41:58:94:38:70:4e:83:fa:a5:4f:af:89:4c:1b:bf:30:
f8:16:f7:41:85:eb:ce:36:99:a8:83:e3:f7:98:59:c6:4b:30:
77:74:f5:00:f5:88:8a:a6:68:3d:bd:77:0c:5b:78:79:36:1e:
8e:42:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:38 2025 by rpki-client