Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: C3Q2P/HqeyF9cm7JNfEWZQZ3M/mNjY1nRK5bKD5/kh4=
Subject key identifier: 72:4A:6A:9D:47:A7:AF:56:B3:CE:4E:53:84:3C:66:A2:90:24:EF:50
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 01974CD6C9057003568A8ECB24E163786C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:00:33 +0000
Manifest this update: Sun 08 Jun 2025 00:00:33 +0000
Manifest next update: Mon 09 Jun 2025 00:00:33 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: bg4/YP2QOYOfUpzhrLxV/mxSVRU2zBvH6CX6A0VPvYU=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:c9:05:70:03:56:8a:8e:cb:24:e1:63:78:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jun 8 00:00:33 2025 GMT
Not After : Jun 9 00:00:33 2025 GMT
Subject: CN=724a6a9d47a7af56b3ce4e53843c66a29024ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:56:28:79:a2:01:f4:5a:5d:26:39:0b:f9:
66:c9:65:2b:8c:2a:d6:a9:1e:ad:5f:f7:24:eb:60:
21:33:71:eb:da:c3:82:36:a9:ff:f1:a9:b2:b0:a0:
e6:bc:56:d5:75:a7:cd:b1:72:34:78:c1:4d:22:4e:
ae:3e:d0:98:c5:22:af:08:99:52:0d:15:c1:64:12:
3d:a4:45:ce:15:84:ba:6e:b2:fe:5c:35:ef:87:57:
93:90:8b:6b:18:1f:5e:c4:9f:31:9e:23:25:f6:95:
bf:be:fc:59:bc:a7:0d:3e:97:82:88:26:55:6b:4b:
28:50:22:7d:dc:23:cd:61:e9:8b:e9:8e:f3:48:0f:
92:69:d9:ed:43:00:3e:91:12:d1:88:15:94:38:08:
06:03:a9:dc:6d:34:78:40:52:3c:8a:02:9a:13:4e:
be:30:6e:2d:3d:d0:94:20:f4:6c:70:5a:04:0c:c4:
3b:ce:5e:bf:c4:6a:cb:e1:0e:58:78:f0:7c:f2:6b:
2a:38:d1:f3:ad:d4:a7:03:ab:0b:5e:9e:65:e3:70:
10:6c:30:18:5f:45:fc:a9:f5:a7:9f:f9:be:0e:ff:
dd:61:62:12:ca:49:83:2c:0f:ec:14:77:51:08:46:
47:37:20:31:2e:13:21:d8:0d:96:3c:08:b5:b6:1c:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:6A:9D:47:A7:AF:56:B3:CE:4E:53:84:3C:66:A2:90:24:EF:50
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ee:27:ca:d4:fd:ed:e2:61:e7:39:dd:37:1f:71:82:e0:83:
a2:36:d5:0b:00:4c:37:7e:a7:9a:40:57:78:65:6b:a6:4e:73:
ac:29:3f:7f:d1:8a:71:85:7e:ae:fb:f9:f2:56:49:73:bb:bd:
d8:dc:d3:e6:c7:41:53:41:47:b6:79:c1:a2:24:fb:98:d1:4d:
cc:55:d2:21:da:f9:84:a3:80:c2:c0:43:0d:63:b2:cd:9e:f4:
30:0a:5b:29:16:2f:7a:25:e9:85:81:e4:d2:f8:91:cd:b5:97:
df:dd:39:8a:f2:29:11:25:fe:9a:ee:ba:57:3f:a1:ed:6a:d7:
3e:40:8b:93:a2:d4:c8:0d:7c:24:ea:fc:31:cf:de:cd:2c:7b:
1f:0b:3a:6d:55:e0:8b:7c:f9:3a:01:dd:be:87:b1:5a:d7:dc:
5e:58:af:8f:45:d7:49:ed:bf:ee:0d:11:4f:90:f9:2e:68:e5:
b5:4e:6b:c4:3a:2b:97:96:2d:dc:00:1f:b8:d5:62:ec:2a:bf:
32:aa:90:5e:a2:63:67:77:2b:c0:21:26:5a:69:fc:72:62:58:
95:1c:4b:54:10:a7:1a:89:b6:75:d6:f8:cb:41:c1:6d:a0:78:
8c:12:d8:90:bc:41:11:55:56:bf:c6:41:37:49:87:41:06:9e:
4e:25:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:25 2025 by rpki-client