Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: 3/lhd1YmHMVST5rp//zQ4Knp9iZVx3T5VbfeO2IDt0A=
Subject key identifier: DB:CA:8C:AA:F4:DE:AF:F6:94:C7:65:53:85:6D:45:CF:49:13:AB:09
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 019749D5D64FF0095B8434B9B372E67E2D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 04F5
Signing time: Sat 07 Jun 2025 10:00:40 +0000
Manifest this update: Sat 07 Jun 2025 10:00:40 +0000
Manifest next update: Sun 08 Jun 2025 10:00:40 +0000
Files and hashes: 1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: lZRLNPeDszI3ujN3i122poBa64ZAp6ccplDeUDNKTXk=)
2: o3HDa5Hn0JXB7VWawD3Vzcdyd5k.roa (hash: di4+72seaNK8FCueSsPtQY60+2j8OsXpOCEk2d98xmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d6:4f:f0:09:5b:84:34:b9:b3:72:e6:7e:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jun 7 10:00:40 2025 GMT
Not After : Jun 8 10:00:40 2025 GMT
Subject: CN=dbca8caaf4deaff694c76553856d45cf4913ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:e2:83:2f:cd:b6:44:96:85:68:df:5a:7d:
36:6d:38:1d:1f:ef:1a:6c:6a:6f:68:5b:85:d7:4c:
b8:c5:53:e5:b5:a5:36:f8:9c:80:8f:2f:2f:9c:31:
1f:0b:50:f0:24:f4:da:00:71:07:f6:07:9b:17:03:
1e:03:43:12:e4:5e:7d:aa:cf:4b:a4:4e:ff:a2:03:
70:f2:49:23:9b:7f:00:f9:9d:a3:29:44:16:8e:9b:
98:ce:05:92:e7:32:44:1d:9b:25:44:a0:b5:3d:1f:
57:0f:55:6f:62:4d:9f:e4:ef:64:61:a0:a2:9e:ba:
25:4e:e2:0d:f4:44:d7:ea:e4:cb:f5:b1:cd:04:23:
46:ce:28:d9:72:1d:9b:fa:9f:51:af:ac:f1:7b:a3:
ca:2d:9e:0d:ec:9a:a8:ca:65:18:ce:35:db:c2:b1:
ed:79:bb:b4:8a:5f:0b:a2:18:0b:b3:68:ca:ec:e9:
59:d9:dd:c0:d2:3f:26:2b:75:60:73:8c:c8:f2:00:
2b:f4:af:51:91:49:38:f4:e6:52:4d:d1:8b:01:dc:
97:8e:1a:00:13:b1:25:3b:9a:56:ca:be:da:09:d6:
9f:c8:05:e8:04:0b:52:5a:03:56:7d:35:07:88:14:
39:69:26:91:77:fa:49:82:f4:41:8f:e5:53:1d:c1:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:8C:AA:F4:DE:AF:F6:94:C7:65:53:85:6D:45:CF:49:13:AB:09
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:8b:c9:20:4e:3e:54:8c:82:fb:17:f2:3b:c9:52:35:dc:
78:d7:61:32:01:ad:23:4c:90:ca:82:33:dd:f2:e9:9e:46:79:
ad:d2:46:0c:33:fd:e9:d6:b4:97:24:ad:5a:d5:28:ba:15:37:
31:5e:bc:5d:df:6b:d4:d6:c3:08:20:05:c9:87:7f:d8:aa:03:
96:cf:6c:5e:b6:fb:94:63:50:91:22:ae:70:c2:f5:2a:f8:7a:
de:20:1a:f9:6e:48:2a:f0:41:32:1c:95:9b:a6:fd:71:5a:7b:
b9:0c:bb:6a:56:cf:5f:3d:ee:8e:f5:e4:05:02:29:a2:7b:e8:
d2:af:f5:4e:c3:dc:74:92:29:31:e9:f3:b5:cc:89:fc:26:3b:
0c:74:dc:9a:00:70:2f:b1:0b:c6:b3:35:b7:0e:73:6f:bc:6e:
a0:fb:6d:3f:bf:ae:48:e9:5a:d3:68:69:50:2c:df:4c:16:c0:
67:b5:39:5d:23:22:dd:8a:10:6b:a1:73:b6:ff:ed:d6:27:39:
47:ce:82:2c:fd:15:06:91:b4:e5:48:4c:62:c0:19:bb:b4:a3:
70:2c:7d:38:90:27:9e:a6:9e:2f:41:2d:95:82:7b:50:34:b3:
14:05:38:68:b2:57:10:10:da:3d:6d:b6:ec:7e:e2:26:b2:49:
28:e6:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:07 2025 by rpki-client