Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: Ris46A13BT2nDHnx1xR01VAlctNGFhwl8BoPbhN5cp4=
Subject key identifier: 00:25:E2:17:E8:27:C5:44:66:58:FD:E6:D6:68:1F:25:53:F7:B2:BA
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 01974B564F443F543F960704485047AFC4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 1303
Signing time: Sat 07 Jun 2025 17:00:36 +0000
Manifest this update: Sat 07 Jun 2025 17:00:36 +0000
Manifest next update: Sun 08 Jun 2025 17:00:36 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: TCdVXIx2Oitkl5wURNU/gXn8cjytKeWs47iai5ROTKQ=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:4f:44:3f:54:3f:96:07:04:48:50:47:af:c4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Jun 7 17:00:36 2025 GMT
Not After : Jun 8 17:00:36 2025 GMT
Subject: CN=0025e217e827c5446658fde6d6681f2553f7b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:08:8b:27:eb:ac:4d:9b:f7:3b:72:5e:46:
32:49:c9:7c:d2:c9:ad:9b:d1:f1:2d:a8:9a:03:b9:
23:00:02:6c:22:f9:d9:45:e0:f9:62:e5:25:d8:0f:
81:2a:eb:1a:e1:4c:5b:10:2e:52:31:08:bb:21:29:
32:63:da:d6:02:d4:b0:61:2e:ad:f8:f8:37:2f:60:
e5:87:5e:1d:8b:75:57:2e:eb:07:b1:c8:7b:ad:e8:
22:f1:c8:6b:65:7e:9f:f3:83:9a:0a:66:ed:b4:0b:
89:b5:19:03:15:dd:db:3a:e7:6e:99:7a:6a:06:76:
d3:ba:a2:d9:14:19:65:f6:01:c0:c6:b2:d5:d6:d5:
5b:e3:38:04:07:8b:a9:ad:0b:42:77:c5:55:0d:25:
00:48:45:b8:40:74:a1:8f:bb:6a:80:a3:fc:64:88:
65:45:94:ce:d6:d5:42:fe:d2:c0:70:79:0f:e0:d6:
25:6b:51:f1:50:09:20:ad:d0:22:48:fb:99:7a:26:
ba:99:91:4a:f8:da:8b:d5:f8:60:dd:76:0b:b0:c1:
c9:04:e8:e5:81:2e:db:de:e6:7e:fd:ce:9e:89:93:
dd:70:d8:53:40:41:a3:66:d0:21:51:46:10:05:52:
9a:7a:e4:37:74:61:9e:88:64:5b:d6:7a:57:48:67:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:E2:17:E8:27:C5:44:66:58:FD:E6:D6:68:1F:25:53:F7:B2:BA
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:4b:19:5c:a2:8e:d1:85:cd:07:33:f6:8b:c3:ef:2e:2a:
1d:3f:c7:14:14:ce:64:05:78:a9:cb:03:b6:09:70:c1:ae:a1:
1a:8b:02:f7:d0:b9:e6:bb:47:64:a9:2c:3f:fc:8a:a3:59:5e:
cb:c6:c3:0a:a7:11:ff:38:aa:38:9b:ee:74:a6:9e:c3:10:df:
9e:36:46:97:60:dd:cb:b9:74:38:97:89:a4:94:fb:bf:75:1b:
c0:e6:ba:61:44:1d:3a:b7:2d:8d:85:17:eb:3f:c3:51:18:00:
c6:11:d2:b9:d5:f1:e2:b1:9f:be:c4:64:72:ee:a2:cf:c2:b3:
c2:77:24:8a:31:9d:17:c0:05:43:46:17:f2:31:5d:c7:a0:ad:
01:ef:f3:8a:fa:c1:a0:e5:27:a0:15:9a:29:26:ea:ff:f3:69:
9f:8f:b7:83:fb:0b:fd:ad:85:55:fe:20:fa:2c:ed:d6:a0:d1:
47:6a:54:19:68:98:9f:f6:dd:7b:f1:3b:01:ca:cf:19:80:2f:
82:ce:b9:18:ca:b1:f2:67:39:8d:15:b8:2d:6c:51:b3:96:36:
cc:77:36:f6:37:f8:b4:00:46:5a:73:cd:62:cd:0d:6a:be:3f:
18:45:50:aa:da:27:fd:56:fb:39:f3:e6:1f:37:8a:ee:a8:c4:
1a:e1:e5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVk9EP1Q/lgcESFBHr8TUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0
YmZmNjEwHhcNMjUwNjA3MTcwMDM2WhcNMjUwNjA4MTcwMDM2WjAzMTEwLwYDVQQD
EygwMDI1ZTIxN2U4MjdjNTQ0NjY1OGZkZTZkNjY4MWYyNTUzZjdiMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5moIiyfrrE2b9ztyXkYyScl80smt
m9HxLaiaA7kjAAJsIvnZReD5YuUl2A+BKusa4UxbEC5SMQi7ISkyY9rWAtSwYS6t
+Pg3L2Dlh14di3VXLusHsch7regi8chrZX6f84OaCmbttAuJtRkDFd3bOudumXpq
BnbTuqLZFBll9gHAxrLV1tVb4zgEB4uprQtCd8VVDSUASEW4QHShj7tqgKP8ZIhl
RZTO1tVC/tLAcHkP4NYla1HxUAkgrdAiSPuZeia6mZFK+NqL1fhg3XYLsMHJBOjl
gS7b3uZ+/c6eiZPdcNhTQEGjZtAhUUYQBVKaeuQ3dGGeiGRb1npXSGdcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAl4hfoJ8VEZlj95tZoHyVT97K6MB8GA1UdIwQY
MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt
Mjc1YzVmNzMxYjQ0LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0
LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApz9LGVyi
jtGFzQcz9ovD7y4qHT/HFBTOZAV4qcsDtglwwa6hGosC99C55rtHZKksP/yKo1le
y8bDCqcR/ziqOJvudKaewxDfnjZGl2Ddy7l0OJeJpJT7v3UbwOa6YUQdOrctjYUX
6z/DURgAxhHSudXx4rGfvsRkcu6iz8KzwnckijGdF8AFQ0YX8jFdx6CtAe/zivrB
oOUnoBWaKSbq//Npn4+3g/sL/a2FVf4g+izt1qDRR2pUGWiYn/bde/E7AcrPGYAv
gs65GMqx8mc5jRW4LWxRs5Y2zHc29jf4tABGWnPNYs0Nar4/GEVQqton/Vb7OfPm
HzeK7qjEGuHl5g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:24:04 2025 by rpki-client