
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: 8si2fu++q8SqUw8HBIKMXCkKSU15zM1+jO/hCwNrlhk=
Subject key identifier: 92:89:4E:79:DC:67:39:29:D3:95:A4:36:0C:9E:FD:AA:A4:B7:BD:19
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 01974FA12E6F69EA2CD19E1A961409EA7E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 0F28
Signing time: Sun 08 Jun 2025 13:00:52 +0000
Manifest this update: Sun 08 Jun 2025 13:00:52 +0000
Manifest next update: Mon 09 Jun 2025 13:00:52 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: O/iykAOP+HbU4M7+3TKrheVN8HZzw7KFNcoL2p9NnEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:2e:6f:69:ea:2c:d1:9e:1a:96:14:09:ea:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jun 8 13:00:52 2025 GMT
Not After : Jun 9 13:00:52 2025 GMT
Subject: CN=92894e79dc673929d395a4360c9efdaaa4b7bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:d0:57:04:2c:ab:9a:c5:dd:16:00:46:09:
a1:b6:3f:64:84:7f:95:bd:db:b8:e0:84:6a:81:44:
86:1c:6b:17:eb:23:8b:9a:5a:6c:32:1c:e8:ef:e8:
3b:e3:4c:f8:9e:bc:09:5c:e1:82:5d:e3:9a:12:06:
6b:76:6a:ec:a4:27:2d:cc:2c:bc:0b:81:56:62:1d:
0a:ec:81:65:dd:71:49:9a:5e:83:4a:6f:b9:6e:95:
c0:ca:6d:30:e1:00:ba:33:5e:e5:9e:67:27:1f:df:
32:fb:72:56:3c:6f:4d:b6:04:03:51:e8:9d:cf:98:
b4:b7:f3:14:d6:55:90:0d:b5:f7:9a:5f:1d:58:cf:
94:a4:4e:ca:0e:cf:a8:56:7f:0c:e0:25:e7:d7:0c:
e1:fb:a1:69:ee:47:d7:36:f0:26:52:b6:42:72:e9:
80:c2:8a:e7:eb:de:d8:ec:48:99:ce:7e:a0:89:42:
d7:a6:49:cf:be:70:99:a7:42:1b:5a:4c:0e:f8:e3:
f1:9f:8c:e2:75:f1:72:bb:24:50:c1:4a:c6:b9:81:
dd:ec:6b:fe:5b:04:e7:d0:2d:4f:96:1c:39:84:78:
94:b2:4a:d1:40:a0:c3:ee:3e:60:6a:bb:c6:00:df:
18:76:0c:4d:d7:fe:a2:2d:3c:7d:7a:a1:50:f7:ca:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:4E:79:DC:67:39:29:D3:95:A4:36:0C:9E:FD:AA:A4:B7:BD:19
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:35:3f:65:40:a2:f8:f4:c6:ec:d4:06:33:c0:19:45:29:
b8:82:63:4c:f5:ee:e6:89:40:c6:72:c2:50:79:40:ad:fa:5e:
b6:aa:fa:51:bd:d8:3d:ed:29:11:36:14:05:2e:d6:96:fb:f3:
a7:cf:84:69:ce:af:b8:69:83:26:73:03:7d:a8:a8:58:e0:66:
c7:bc:d6:1b:9e:2a:b8:2e:17:47:de:db:92:1a:dc:19:e5:83:
de:7e:79:bd:c7:e4:25:21:47:54:85:8d:91:59:fa:c7:57:ab:
5a:69:c6:58:b0:53:b5:92:62:1d:0c:19:11:c8:db:a8:69:61:
ba:fa:3d:ac:93:84:0e:1d:a0:98:46:9d:b0:a4:39:ac:bf:55:
7a:d0:3a:cf:69:58:30:14:17:d7:b4:ca:36:2d:31:c7:53:39:
fe:79:d3:4f:21:c6:2b:76:b7:5a:9b:d4:3b:48:0c:6f:87:10:
ec:53:2b:e0:67:65:e3:79:4a:18:f3:e3:b0:4d:cc:0e:35:b9:
b9:f0:bc:c3:88:f6:75:a2:aa:42:97:50:30:9f:cd:ac:9c:42:
a5:96:5b:20:2e:9a:f2:6a:35:c1:fa:88:24:68:36:62:52:ab:
ee:52:c0:43:16:ff:ca:3f:b5:31:52:4b:f4:1a:e4:67:df:b4:
dd:2a:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:35:08 2025 by rpki-client