Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: Pv9GUBHJi2xM5ZQPR5K7xqiXn72oiXpTMAhOecpswrY=
Subject key identifier: 21:AF:9E:31:BF:C9:07:DD:55:D4:0E:74:2C:DC:4E:70:75:5E:72:E5
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01974B8DC397C632C03B5903E81F26744F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 056F
Signing time: Sat 07 Jun 2025 18:01:11 +0000
Manifest this update: Sat 07 Jun 2025 18:01:11 +0000
Manifest next update: Sun 08 Jun 2025 18:01:11 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: aJ93NCjMlYgxyDg27Hf4ajdyYR4hVoK7lhvsLNBo+OE=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c3:97:c6:32:c0:3b:59:03:e8:1f:26:74:4f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jun 7 18:01:11 2025 GMT
Not After : Jun 8 18:01:11 2025 GMT
Subject: CN=21af9e31bfc907dd55d40e742cdc4e70755e72e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:26:97:4c:bb:2c:8a:21:2c:aa:e6:07:a7:
f3:78:5a:cf:37:86:56:3f:8a:dd:85:1c:64:10:b4:
cd:d8:69:10:75:64:41:a4:00:fc:dc:2f:83:9a:2f:
88:4a:ea:e2:91:88:aa:82:cf:c2:d9:98:84:33:01:
14:5c:71:77:a5:66:16:a3:cf:fb:11:7f:73:f9:13:
81:60:5b:53:67:c8:ef:77:b9:d1:aa:b4:37:60:30:
e4:70:89:a8:a6:0b:38:73:8a:66:97:76:98:d4:79:
47:35:5e:07:2f:30:ae:6c:25:1d:45:a4:fd:7a:ee:
34:e1:68:77:19:6d:76:74:24:a4:83:40:a1:ad:11:
1d:7e:32:1d:ba:c4:db:a7:03:af:19:93:c8:86:0b:
b2:69:b5:f8:60:c6:d3:67:b7:da:32:7c:be:4a:63:
56:18:42:46:a2:e4:86:6f:e7:ba:a1:22:5c:ef:6d:
c5:bc:67:85:3f:de:b3:61:2b:06:7d:8e:1e:ed:16:
0b:95:c1:2a:60:5e:be:89:46:64:d7:6a:88:1c:30:
00:da:63:fc:ba:23:a8:d3:36:e5:a6:27:78:d6:2f:
c2:3e:32:e5:65:90:69:0b:70:96:e3:31:48:75:47:
9c:0f:b5:71:9a:cd:a6:0a:78:36:b9:25:be:83:7e:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:9E:31:BF:C9:07:DD:55:D4:0E:74:2C:DC:4E:70:75:5E:72:E5
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:86:0e:ad:37:3f:d7:5f:a4:d9:d8:de:81:af:c6:24:34:
29:8f:a5:43:2a:d0:47:7e:02:75:8d:2e:02:7c:f3:1f:1c:a0:
df:41:f0:23:bd:df:44:7e:9f:14:d6:33:d7:d1:35:dc:1a:b6:
d9:b1:73:01:bc:09:ab:73:1e:d9:3c:b3:34:a3:e5:b9:7e:3d:
10:8e:97:f1:c5:7a:9e:ba:3a:e4:3e:6b:00:24:31:9f:2d:a7:
2b:a5:de:3e:af:3d:c4:f7:be:d1:36:eb:34:b7:75:08:e7:1d:
1a:e2:bf:d4:a5:53:2c:25:df:9b:87:f2:a1:8b:79:cc:a4:5d:
1c:2a:da:a0:8d:44:5a:61:7b:c3:2d:02:44:93:ab:40:b2:e0:
4d:ac:2b:e5:16:92:59:db:9a:f9:09:98:2f:fd:63:c7:f3:d5:
b7:1c:b8:cd:6e:fa:50:c5:9c:55:0c:d2:39:aa:bd:86:76:84:
da:a9:d4:55:0e:2f:ee:c1:cc:d1:92:49:de:17:67:d2:f1:d7:
1b:87:ed:cb:b5:bc:b4:81:67:c0:62:80:ed:18:8f:5f:32:7d:
10:d6:5f:b2:af:90:19:a4:0b:20:86:a9:76:42:f5:68:7e:a5:
0d:cf:6e:5c:88:50:dc:e1:2b:32:b2:28:5b:ea:2b:8e:c7:32:
e1:d8:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:28 2025 by rpki-client