Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: A2+OxeHeLqfpdcVQkOfXPLXIORrClpaA9b15stqRVdE=
Subject key identifier: AF:38:B6:1C:1E:6B:86:18:A0:43:92:BB:7F:A1:6B:61:30:1B:31:D8
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 0197466711FEDFF699A1B9A31FF10825A657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: E8
Signing time: Fri 06 Jun 2025 18:00:49 +0000
Manifest this update: Fri 06 Jun 2025 18:00:49 +0000
Manifest next update: Sat 07 Jun 2025 18:00:49 +0000
Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: RP7NiHv+igmYMv6uVn6GZUHKGC3fSP6hAcFz6ZOyoHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:11:fe:df:f6:99:a1:b9:a3:1f:f1:08:25:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Jun 6 18:00:49 2025 GMT
Not After : Jun 7 18:00:49 2025 GMT
Subject: CN=af38b61c1e6b8618a04392bb7fa16b61301b31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:79:ed:0f:15:0a:e6:6f:35:99:23:5f:c3:
fc:e8:71:bc:4c:db:34:25:fa:e0:cd:a3:43:79:aa:
8c:10:aa:d6:90:3b:cf:f4:a3:7b:92:08:e8:38:94:
9b:f4:02:d6:1e:8a:66:e9:6d:05:7c:c7:42:06:a1:
b5:81:50:f1:ea:a4:04:9a:7f:84:d5:2c:92:4d:5e:
8b:38:81:3a:93:a9:f9:49:08:ca:cf:75:29:c5:75:
cf:7e:08:84:72:92:6f:3e:3a:80:c5:b7:d7:0e:0c:
c9:87:78:c0:70:3f:2e:39:67:8d:b8:06:18:38:1f:
0e:14:d0:5a:97:ec:86:05:83:19:0b:39:08:ef:db:
44:02:9e:68:db:eb:e9:e9:5b:ec:20:b8:17:29:7f:
72:31:15:bf:bb:d0:43:4f:39:cc:c5:1a:bb:1b:d6:
67:b9:84:d6:42:19:d2:d4:06:7c:e1:ba:a4:d9:7e:
35:e4:9c:69:61:c8:d1:47:b7:57:97:09:ea:8c:86:
b4:7d:26:14:12:5e:c0:d1:9a:e2:d8:30:05:9c:38:
aa:4f:c8:71:76:aa:dc:50:c2:ab:41:66:e2:51:9f:
b3:1d:73:e6:bd:89:8f:94:ed:78:20:5f:ff:ee:b7:
6a:0b:88:bb:9c:00:0c:17:9a:92:3d:fa:26:ef:9d:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:B6:1C:1E:6B:86:18:A0:43:92:BB:7F:A1:6B:61:30:1B:31:D8
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ce:a9:23:e1:de:21:ec:2f:62:c9:a5:20:f7:8e:ed:6b:6e:
2b:43:cc:a4:cf:38:6d:15:0b:7d:41:f9:c9:45:41:f7:f9:14:
80:2c:b0:b4:cb:bb:08:f7:af:3e:66:8b:d7:00:c5:a7:9c:89:
db:65:30:78:2c:22:44:5c:54:a4:a2:d1:e0:0b:4d:bb:cf:85:
d0:26:62:dd:ee:0a:42:0f:de:04:51:00:58:91:23:85:74:24:
ae:8a:c6:ff:de:ad:b1:1f:f2:b9:37:f8:8c:d2:74:61:75:0c:
99:70:ff:01:93:be:42:ad:81:4d:99:32:d7:44:96:86:c6:31:
8a:63:de:72:34:a0:ad:b4:ca:37:17:d8:a2:fb:c7:d3:2c:e3:
46:56:97:52:53:d5:eb:94:56:fd:c1:32:3b:2b:2c:ac:c5:7d:
74:7a:b6:b2:d9:aa:67:25:d9:63:ee:2e:26:99:cc:43:86:a9:
c8:84:1d:bb:fc:b4:c7:64:71:77:a2:e8:64:af:ec:58:68:d6:
04:ba:53:ff:d9:5c:1c:d5:e4:55:7d:a8:6a:eb:00:a5:a3:ff:
95:c3:2b:4d:90:d6:77:4a:56:3e:7a:da:ce:fe:98:f0:27:5e:
1f:98:46:ae:ea:db:dc:6f:41:40:8f:20:da:35:45:0e:8d:7c:
ac:36:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:44 2025 by rpki-client