Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: LgV1ZBqyyugRBsQwQbIWFEh/LbnoK/LmIsCebIOybVc=
Subject key identifier: D9:B9:AC:85:8B:3E:5E:43:58:43:80:61:33:7A:BF:7C:E0:3F:4F:82
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 0197526B55224BB75360C2554CB6480350BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 02:00:55 +0000
Manifest this update: Mon 09 Jun 2025 02:00:55 +0000
Manifest next update: Tue 10 Jun 2025 02:00:55 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: TJ3bbay/WJyN4wFLhgyEh9dIki1DR9/YeSAAbb1EY/k=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:55:22:4b:b7:53:60:c2:55:4c:b6:48:03:50:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Jun 9 02:00:55 2025 GMT
Not After : Jun 10 02:00:55 2025 GMT
Subject: CN=d9b9ac858b3e5e4358438061337abf7ce03f4f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:db:09:b0:2d:28:64:6e:bd:b8:ca:47:88:
ab:61:6b:22:74:02:c9:bc:94:87:e1:92:a3:12:3d:
62:1e:b4:7f:a1:d5:9f:f0:04:ec:e3:f3:2f:aa:bf:
60:74:59:21:5f:76:4d:01:03:48:0c:6e:8d:9f:7b:
2d:85:0b:10:83:5b:3e:70:03:ec:30:86:9d:cc:d0:
ad:ee:0d:75:cb:94:f6:54:a6:c4:a0:01:e9:ba:c0:
3e:63:46:c4:65:43:c2:59:7d:be:09:4e:5e:05:4a:
a5:01:f2:49:ae:f2:78:ee:f5:34:41:d9:99:52:c7:
15:21:42:2a:df:55:c9:35:13:dd:8e:71:de:68:98:
1f:75:49:9d:56:bb:5c:ab:ed:d7:19:2f:84:25:81:
29:f4:3d:ec:62:4c:25:82:6a:ef:93:2f:54:00:3d:
6c:af:58:b4:d7:9a:2c:7b:e0:5c:30:b8:a3:50:80:
dc:b9:ca:6f:f7:45:97:80:b3:e7:a9:01:b2:f2:fe:
e1:60:8f:96:e5:bf:ee:c1:94:f8:9e:ea:30:7c:04:
f7:15:6c:4e:92:b2:a5:03:b5:d1:8f:e0:e6:08:9a:
e8:7a:04:95:08:19:5d:de:c0:3d:cc:a2:3d:29:88:
58:cf:c3:f4:de:0f:d3:1a:f4:69:d1:79:8d:e1:82:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:AC:85:8B:3E:5E:43:58:43:80:61:33:7A:BF:7C:E0:3F:4F:82
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:ef:44:7c:38:9f:86:13:f1:52:cd:7c:54:e9:15:44:5c:
c8:09:de:0c:52:91:f4:2b:f2:db:9d:c9:bf:37:ee:38:cc:87:
5a:1b:42:fd:08:c4:ed:27:01:12:07:a7:1d:a5:f6:a9:92:51:
c8:de:ea:02:4c:58:ae:fe:ea:b2:c8:e6:e9:38:3f:44:fb:4b:
e4:19:61:45:88:52:ca:e9:91:19:12:6c:83:74:49:63:f2:44:
43:ed:ce:ce:18:8f:99:17:f4:9e:2d:d6:6e:e1:45:9c:31:83:
c0:1e:e1:b8:1c:4b:93:91:58:30:33:20:e3:55:fc:f4:7d:7b:
1a:e9:c3:45:56:bb:af:be:7d:66:1c:eb:ef:f8:a0:2a:d1:fc:
d4:45:e6:3c:0a:4e:c1:63:51:dc:95:67:b6:63:c6:30:a4:1c:
9b:1e:68:06:6b:ea:b3:f0:43:5c:50:01:ef:26:ca:4c:6b:2a:
85:22:d8:1c:17:36:ef:64:41:d1:35:3f:08:ce:a8:15:cd:5b:
29:e0:da:7d:30:52:1a:1e:b2:79:c5:8e:10:69:49:81:54:01:
e1:c4:7e:de:8e:df:3a:81:4c:0c:cc:f1:de:6b:6f:40:d2:f8:
19:6d:ed:f3:a9:d2:80:34:4f:90:99:2a:70:95:f3:a1:ab:35:
cf:42:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:57:08 2025 by rpki-client