Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: BhWCUVBK052WGAsdPkFb0+C7JsDNKjNUvqqBb/pmnKQ=
Subject key identifier: 7B:A6:70:5E:82:E6:CD:EA:AB:EB:E4:20:C8:AE:F4:35:54:FF:0E:6A
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 01974EC578E8358162897408A502015466A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0B9B
Signing time: Sun 08 Jun 2025 09:00:53 +0000
Manifest this update: Sun 08 Jun 2025 09:00:53 +0000
Manifest next update: Mon 09 Jun 2025 09:00:53 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: gIx6Ky+uYV3KtE7Jf/z6P9W2OOL2a9AAze0zwIfZv7g=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:78:e8:35:81:62:89:74:08:a5:02:01:54:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Jun 8 09:00:53 2025 GMT
Not After : Jun 9 09:00:53 2025 GMT
Subject: CN=7ba6705e82e6cdeaabebe420c8aef43554ff0e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:1f:10:a5:de:2f:57:24:ca:c0:af:19:77:
c5:4f:1b:2e:11:62:56:4a:c0:31:e9:a3:6d:05:ad:
54:d2:c2:71:56:f9:64:77:a0:c5:4a:9a:66:e2:9c:
fc:a5:b2:c6:36:ec:f1:63:04:62:83:b8:49:f8:c7:
2d:44:57:ee:9c:c8:1d:34:d2:7d:16:ea:5a:d0:91:
cd:a3:f7:2c:3e:ac:40:be:a5:8d:7f:d0:0d:25:35:
47:73:fd:5f:f4:cc:7b:ba:23:39:f6:03:8b:e9:d6:
77:ef:ce:0c:84:9d:73:b2:1d:bb:03:fb:c2:2e:37:
58:7a:f3:9d:a2:06:7d:c7:3c:6f:c2:64:d9:3f:5b:
43:b0:da:d6:66:a0:76:69:45:37:f9:57:f5:d0:2d:
18:aa:36:b8:55:c1:98:0a:9c:25:7c:bb:62:9d:00:
4f:7c:83:b2:45:56:0c:9e:61:76:89:80:16:f8:95:
7a:db:b5:e1:b4:d5:ea:bf:d8:d8:f2:fd:6d:88:30:
c5:e0:63:28:e9:ad:4d:fe:d1:fb:f9:4a:31:0c:a4:
0d:b9:80:94:e1:84:67:06:4d:33:73:3e:c8:35:ac:
dc:6f:79:a3:af:72:f6:de:4d:5e:3f:60:db:00:83:
6d:aa:d8:7e:b4:d4:72:a5:0e:76:3a:16:e7:88:97:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:70:5E:82:E6:CD:EA:AB:EB:E4:20:C8:AE:F4:35:54:FF:0E:6A
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:c1:66:2b:51:b4:ec:26:77:58:a1:5d:99:79:10:71:d4:
66:de:fa:2e:f6:b3:a0:de:9a:53:ee:0a:57:08:28:e8:90:af:
e9:a3:97:3f:26:69:b3:94:58:87:1d:e5:26:99:5d:d3:46:a1:
f2:b1:46:77:92:5d:04:fc:f9:ad:d3:44:48:8b:60:24:ed:9c:
f7:d6:45:2f:b7:ef:a7:d0:54:7d:06:86:1c:44:11:b2:eb:eb:
fd:57:85:52:3f:35:8a:57:28:68:fd:d6:73:20:dc:c6:c8:c3:
c4:cf:0d:b8:a0:02:71:1a:6b:23:a4:54:d6:dc:44:e6:42:32:
a0:c2:0a:5a:96:56:46:fe:e6:fe:ce:2f:bd:f0:ae:be:a3:4f:
6f:f0:1a:0b:7e:12:b1:76:62:8e:de:11:a4:00:a4:f7:1d:54:
98:64:17:ce:92:e3:ac:0a:63:7b:26:7f:0f:90:3c:4a:4e:63:
0c:a4:1c:39:73:c8:dc:99:f4:f1:f7:a3:64:c1:12:c6:f0:62:
0f:81:e7:70:c4:68:88:a5:f9:fb:bd:63:a3:68:98:68:6d:8a:
df:e0:61:fc:a7:12:5d:a5:ac:d5:d9:c1:22:f6:ea:96:40:12:
a7:2f:90:ad:fa:c6:18:01:87:94:7a:0d:ff:8f:9c:4f:c3:42:
a7:f5:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:24 2025 by rpki-client