Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: LOfdRmbOJ7iUV7f9iIrQlYALa3AkOHZ27Pt4kg8/swQ=
Subject key identifier: 51:B5:31:8F:98:55:03:0F:B2:70:07:52:0C:9E:66:EF:AA:A9:A3:6E
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019750EAA34971405051E9E4D2EA16D14AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: D0
Signing time: Sun 08 Jun 2025 19:00:43 +0000
Manifest this update: Sun 08 Jun 2025 19:00:43 +0000
Manifest next update: Mon 09 Jun 2025 19:00:43 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: ZHhNoobNfBaVBLRqOmbVW5OP3bqKnGnTvHb32M51z/0=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:a3:49:71:40:50:51:e9:e4:d2:ea:16:d1:4a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Jun 8 19:00:43 2025 GMT
Not After : Jun 9 19:00:43 2025 GMT
Subject: CN=51b5318f9855030fb27007520c9e66efaaa9a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:78:5d:ac:85:b6:64:5b:14:fd:40:76:9a:
b5:ed:31:2b:bf:28:be:67:4d:a3:36:b3:11:b1:f4:
69:34:09:55:a0:60:91:83:d7:66:40:a7:df:4b:01:
23:5a:4d:73:82:e1:62:e5:7c:80:8a:ed:45:76:68:
58:b1:d1:8a:39:c6:27:b0:b0:06:26:d6:cd:e1:5c:
c7:bc:ca:67:4f:c3:fb:81:5c:62:84:07:22:da:60:
e4:37:30:9f:53:36:59:c6:66:f9:2b:8d:31:b9:54:
92:3d:1a:1d:b0:be:b8:f5:7d:a6:c5:b2:49:b2:f3:
82:4f:96:b2:f4:ba:1f:fd:38:cd:ad:2e:60:d8:a5:
de:ac:d0:28:f3:cb:2c:39:7c:2a:52:06:7f:94:ba:
8c:d9:9d:4f:67:76:5b:58:3d:28:0c:19:75:ba:cf:
b1:ba:18:a9:8e:59:7e:10:7b:d1:b3:83:a8:08:38:
a8:dd:0a:1a:f1:4c:03:79:d8:56:de:fe:e4:0c:ed:
fc:ed:84:23:ad:15:5b:bb:a1:aa:82:82:be:de:30:
6a:e4:ab:9b:c3:65:ea:a7:be:f3:3e:51:54:f3:85:
49:e7:9d:a8:e7:c0:75:20:f1:7f:07:a2:fa:16:b2:
3d:d7:6d:95:5f:1d:17:cc:9a:42:92:96:a9:12:03:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:31:8F:98:55:03:0F:B2:70:07:52:0C:9E:66:EF:AA:A9:A3:6E
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:ce:16:2d:7f:7e:bd:41:fc:d4:21:55:c1:89:6e:cc:a2:
80:e8:33:ac:82:6f:58:a2:8f:d1:d2:f9:d4:b8:f5:b5:5e:a6:
76:53:44:ff:51:57:61:f4:07:83:5d:e5:b5:d4:92:f0:e9:9a:
f5:f5:57:3a:e6:00:1f:bd:83:41:79:12:da:bd:81:b8:a9:1f:
c2:1f:3b:68:b6:be:6c:b0:06:f9:bd:36:fe:e2:c3:0d:d4:34:
03:bc:c8:80:b7:2c:ce:47:68:9d:cc:0a:97:d4:22:d8:bb:40:
43:30:e3:18:8a:5a:c1:5a:46:b3:a8:88:08:f0:ca:98:53:49:
d7:2e:e2:98:49:e2:6f:fd:9e:d2:95:f2:17:3a:5e:a3:b9:5a:
e7:44:98:68:89:7d:9a:fc:c3:97:99:1d:67:5b:b2:62:86:e7:
c2:42:a8:82:16:d3:86:e1:7a:ea:71:95:c4:58:aa:fe:c8:1d:
64:cc:d2:1c:3c:0d:1c:30:81:a6:32:30:14:e1:33:5f:77:74:
68:3b:9c:cb:eb:d5:61:3e:2f:b2:e7:5d:05:45:4f:af:ae:bc:
ef:e9:7f:de:ea:9b:db:93:2e:1c:e8:d1:16:52:ad:65:4b:cd:
0f:a6:e3:57:07:37:04:65:86:00:7b:c4:bd:f4:f6:ac:d2:60:
cc:50:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:12 2025 by rpki-client