Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: AHct3bgy+mkmHp1RmPNgikvktkEbeCu4emDKmEDInrU=
Subject key identifier: 6E:C2:A9:52:D2:8C:C8:23:BA:A2:6D:37:81:48:56:7A:40:F6:3F:11
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019742C15685214DB7776908709691BCC48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 17
Signing time: Fri 06 Jun 2025 01:00:56 +0000
Manifest this update: Fri 06 Jun 2025 01:00:56 +0000
Manifest next update: Sat 07 Jun 2025 01:00:56 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: 5REhljP3CVTw0tqqr+Le5Ur9T2oICwabCdkM0sRBLLg=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:56:85:21:4d:b7:77:69:08:70:96:91:bc:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jun 6 01:00:56 2025 GMT
Not After : Jun 7 01:00:56 2025 GMT
Subject: CN=6ec2a952d28cc823baa26d378148567a40f63f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:6d:e2:09:51:f4:c0:2e:db:5e:b9:6e:da:
f3:b4:5a:d8:7b:91:17:ca:7b:89:40:de:c5:d6:a8:
44:74:2d:24:e1:38:d5:5b:2f:a6:11:e7:95:ed:90:
db:75:59:57:73:99:f9:33:66:ca:f7:c4:6e:4c:1f:
5f:8c:af:15:d3:48:08:53:15:07:10:f9:14:31:a3:
48:c9:37:fc:e6:6d:1e:7a:b9:62:88:22:7d:18:f1:
cd:c5:66:5c:13:08:97:3f:b4:e1:80:96:26:23:a4:
43:fa:3f:4b:c3:b1:9b:ba:b2:0b:a8:a3:c2:7f:06:
51:62:2c:cb:45:93:3b:64:8a:50:31:50:1f:57:01:
e9:d5:23:38:66:71:ae:85:92:72:b5:77:1e:b5:1b:
f5:a5:89:7e:5a:38:08:aa:43:ae:6a:e8:17:83:72:
e6:02:81:94:e4:25:df:ca:bd:15:89:3e:88:1f:d1:
0b:aa:70:1f:03:c0:21:ba:a3:c6:f7:97:af:79:ae:
71:5b:e1:03:53:d0:48:32:f2:5c:64:0f:ca:b1:3a:
df:e5:15:bb:94:16:87:ff:6c:b4:c4:02:27:32:e7:
08:2c:0c:fa:c3:af:2c:54:70:85:5e:a3:04:30:e8:
93:c1:aa:f4:40:e9:3e:25:ce:bc:3b:88:8c:98:8b:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:A9:52:D2:8C:C8:23:BA:A2:6D:37:81:48:56:7A:40:F6:3F:11
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:16:2b:57:e9:23:2e:1f:3a:06:c3:7f:55:9c:9a:c0:b3:
88:88:8e:aa:a2:be:06:6a:98:80:73:97:8f:66:e8:f1:b7:b8:
74:e5:51:84:b8:b5:96:39:64:f8:97:13:36:bf:61:9c:e0:7f:
b7:3f:19:1a:e1:04:24:15:05:01:0f:72:b8:d1:f9:76:5e:79:
47:91:c0:9b:9d:61:16:ad:55:d6:e7:da:c3:3e:ae:9e:3e:03:
78:59:95:b5:e5:bc:8c:f1:a6:e7:6e:00:a2:47:06:0f:6f:70:
8f:4d:fd:a6:85:31:7c:5d:04:92:5a:15:59:b9:32:5c:7c:78:
0c:54:2b:37:83:0a:9e:21:7a:88:35:89:ff:a6:31:d5:15:98:
c4:ab:73:7a:24:c3:c5:92:9c:80:83:43:68:30:27:16:1e:7f:
db:78:b6:0c:76:d8:05:e6:d1:7d:21:6d:b7:5d:ab:02:6b:7c:
44:d9:57:70:23:23:96:17:65:01:65:77:cf:96:10:f2:fa:0a:
a1:c0:9f:e7:a9:09:03:71:d3:ca:96:46:5f:17:58:32:49:1b:
45:ac:57:f0:b1:20:f1:f0:53:d6:2a:74:5c:ee:73:aa:1d:e2:
30:92:7c:2e:89:83:d4:d4:1c:46:5f:01:3a:93:de:57:98:3d:
d2:ec:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:38:00 2025 by rpki-client