
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: lj42kCkDpEUnS+bqgyuVQXhQuZCTxwX7E5URd29MUX4=
Subject key identifier: 6C:10:16:0B:E0:41:4B:80:02:F5:E9:4B:16:2E:03:C8:42:62:39:E5
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019750469598B835DA475B2E29CB0E7BDD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:01:32 +0000
Manifest this update: Sun 08 Jun 2025 16:01:32 +0000
Manifest next update: Mon 09 Jun 2025 16:01:32 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: VUFDxZ01nKsE7f9kBi+0X8cX/lw/DKIkFRcj5x9vF2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:95:98:b8:35:da:47:5b:2e:29:cb:0e:7b:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Jun 8 16:01:32 2025 GMT
Not After : Jun 9 16:01:32 2025 GMT
Subject: CN=6c10160be0414b8002f5e94b162e03c8426239e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:ad:bb:51:76:ef:f3:37:bd:1f:02:5d:8b:
d0:3e:0c:da:de:bb:be:02:a6:8b:b1:4f:88:6b:8d:
a0:df:ed:ed:a8:0d:5b:f5:1a:46:82:a0:7c:79:fd:
5c:94:22:6f:f0:0d:b6:4f:03:68:53:ac:a6:a7:20:
2b:6a:c2:ff:9c:24:1a:42:15:45:7a:49:4e:8c:d0:
81:2d:d4:d6:60:ba:20:7a:eb:81:23:53:8a:67:25:
4b:ce:3a:de:e8:0a:c1:3b:21:b2:43:fd:31:25:a2:
25:c7:81:e7:e3:16:97:fd:82:aa:79:d1:f9:c8:4b:
70:25:96:68:03:b0:ac:03:b1:22:dc:f6:cf:a1:82:
56:9a:af:4c:b4:61:ec:1a:4b:10:81:ef:bf:b3:37:
e8:3d:ef:a1:ec:dd:b2:8b:8c:ce:53:fe:78:4d:07:
10:ba:af:23:bc:43:c8:43:18:d3:82:4a:0a:dd:10:
9b:56:38:f3:a0:8d:d5:d7:39:75:e6:c8:af:7b:d4:
a9:69:70:3c:22:d8:ee:2f:0b:ec:12:0e:0a:33:1f:
9d:bf:7b:08:fd:29:d0:4b:12:d3:0f:05:ab:e2:12:
df:a9:a1:82:c9:e4:22:c4:33:05:df:de:15:07:ff:
34:f8:e8:20:41:74:eb:2c:d2:21:71:19:69:3e:80:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:10:16:0B:E0:41:4B:80:02:F5:E9:4B:16:2E:03:C8:42:62:39:E5
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c9:bc:c3:4d:d6:52:1c:ca:3b:04:5f:e7:de:16:58:24:b9:
be:88:24:9d:1c:d8:62:e6:60:4a:43:e3:8b:57:81:ba:65:25:
ef:de:c2:ca:f0:d3:b0:ac:f6:22:29:1f:b9:47:82:76:c7:bc:
38:aa:a7:78:8c:ac:42:40:f4:4f:14:05:6d:bc:42:38:78:0e:
09:9b:7c:81:f9:ff:49:79:6e:d2:06:7b:b2:22:74:69:36:b3:
b9:fd:aa:56:05:be:83:33:73:1d:9a:19:fe:6d:29:7f:9d:ea:
e1:13:3d:21:c1:a8:e3:f4:18:19:e1:24:a7:68:b4:77:1e:bd:
e8:4a:14:12:50:d7:75:0d:66:c1:40:97:4c:f2:d8:b4:55:ee:
0c:ef:46:c9:1a:f5:ec:26:9e:73:e0:93:dd:bb:41:ec:64:ad:
9b:fd:56:f9:71:fe:be:9d:66:f4:a5:f4:79:b7:78:05:21:07:
b9:cb:91:bb:f2:25:9c:e6:0c:df:0a:b7:3c:71:91:4d:c4:a1:
f5:31:e3:31:ec:0e:19:21:a8:b2:34:0a:e1:23:46:6b:18:23:
1d:8b:6a:25:f3:df:3a:1f:bc:3f:22:86:1b:60:dd:f9:3d:89:
85:fb:cd:9d:8b:8e:0c:3c:36:4f:7a:f3:99:7f:b8:70:f8:98:
4a:7e:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:03 2025 by rpki-client