Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: 4PcwPW+rJzfwaDXRo5dCj2e7W0zGeYOGbd7Na9ppJow=
Subject key identifier: C0:1C:55:08:96:6C:D4:56:FC:BD:B8:C1:45:11:11:15:A8:3D:EA:11
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01974C9FF9FB210CFD025D05925D7D4C0F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 23:00:42 +0000
Manifest this update: Sat 07 Jun 2025 23:00:42 +0000
Manifest next update: Sun 08 Jun 2025 23:00:42 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: 00mCCgMFMrhObqhMpePUjGZmLMH30PtnRI4LjmylfW8=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:f9:fb:21:0c:fd:02:5d:05:92:5d:7d:4c:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jun 7 23:00:42 2025 GMT
Not After : Jun 8 23:00:42 2025 GMT
Subject: CN=c01c5508966cd456fcbdb8c145111115a83dea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:35:64:e8:de:f0:97:82:4f:4f:47:e9:8a:
83:32:18:aa:4d:fb:0d:0c:1e:39:80:3a:c9:4c:a3:
b8:f7:b2:50:9b:29:3e:a4:8d:10:1b:8f:a8:b6:9b:
80:c7:79:aa:76:85:eb:b5:d3:50:b8:1e:5b:c2:d6:
ee:f1:54:2a:39:56:8a:88:1a:26:a1:bd:9c:10:8c:
0b:fe:3d:48:67:dd:3d:31:98:f6:cc:9c:df:24:b0:
c0:82:5b:ce:a5:dc:c7:b7:07:ad:07:ab:83:c6:19:
3d:c6:43:cc:38:e0:a6:d5:7e:5a:a3:f4:4e:5f:49:
1d:cf:bc:8d:62:3e:1f:4c:e9:14:a6:1d:9d:19:cd:
33:d7:90:79:76:fa:8d:b2:8a:d3:4e:c2:90:5b:d7:
2f:f1:df:a3:51:62:18:70:c4:70:4c:1d:8f:31:4f:
4b:2f:82:61:f6:f6:cc:27:52:e1:97:b1:b5:78:ef:
ec:b2:b9:da:cd:8f:6f:65:84:e1:15:1d:ab:b6:66:
04:ad:0b:bc:d6:73:37:77:7c:56:54:a0:bf:94:06:
e5:00:2b:3c:a8:34:ed:9d:4f:0c:1e:d0:01:db:bc:
0c:74:1e:9c:40:9d:c2:2e:4b:08:d8:67:b1:87:6b:
0a:6a:17:87:4f:76:6b:ad:73:27:1a:3c:86:8c:62:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:55:08:96:6C:D4:56:FC:BD:B8:C1:45:11:11:15:A8:3D:EA:11
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:ad:24:ec:ca:7d:9b:61:18:68:d6:2e:ec:6c:17:0d:24:
77:e0:15:95:c5:b6:f1:da:f5:7f:06:92:20:18:34:1e:63:ca:
12:3a:af:3f:bd:7c:34:18:59:4e:f6:78:c3:2a:09:47:96:c8:
f0:ba:a1:fc:b2:67:c2:01:46:87:6c:e4:68:6d:99:c4:fe:61:
4d:54:7e:ce:2e:8f:23:b0:a1:c6:e5:d5:cd:cd:24:43:5c:64:
c1:47:80:42:26:7a:dd:6e:ca:82:e2:fc:c5:c1:c1:bd:08:25:
b3:e9:2d:a8:b0:07:94:f3:3b:d9:46:d7:90:e8:17:50:b8:b7:
53:6b:a4:2e:5d:e2:1e:d3:54:da:51:fb:44:c7:d6:bc:d0:5e:
e3:a2:cb:4d:dd:1b:89:8d:49:9e:e8:03:51:81:08:b6:eb:4d:
be:b9:d8:a9:eb:19:27:90:e6:b7:db:76:d5:df:56:6d:c6:83:
84:13:b0:78:1a:56:80:c1:6c:f2:e7:19:f9:1a:5b:17:d3:e1:
8f:93:1c:be:7c:da:82:60:0a:1d:e0:a9:03:67:b9:a2:73:67:
dd:7a:c7:c2:46:34:2f:4d:f6:fe:f7:86:ab:b0:68:69:10:84:
4b:1e:ef:17:9a:01:97:f2:39:0e:78:4d:30:4d:88:e4:3a:e2:
f5:2e:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:09 2025 by rpki-client