Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: jCC76l56t/WR7WLoqCcQ2NZo0ir3uBGyTk0Yqz8ukQw=
Subject key identifier: 17:3C:5E:DC:9F:36:85:09:A7:61:0D:69:5E:54:08:99:51:87:6A:6D
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019746671E5EDADA7DB36D1BF0691E1CDA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 18:00:52 +0000
Manifest this update: Fri 06 Jun 2025 18:00:52 +0000
Manifest next update: Sat 07 Jun 2025 18:00:52 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: j9uj7KX1ryXTPIu1E+xisrfxlxBS8+gweiqLEtnF9BY=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:1e:5e:da:da:7d:b3:6d:1b:f0:69:1e:1c:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jun 6 18:00:52 2025 GMT
Not After : Jun 7 18:00:52 2025 GMT
Subject: CN=173c5edc9f368509a7610d695e54089951876a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:f3:75:04:85:5f:ee:6a:62:f5:ab:bb:e4:
2c:e4:f2:75:39:41:92:bc:28:8c:68:90:fc:2b:fb:
d4:73:6b:9e:d6:6b:0a:b9:77:2d:af:f9:ad:48:fc:
5c:5b:c8:0e:04:5e:46:83:dc:db:1a:b4:94:e8:f5:
f5:e6:71:33:3a:22:45:23:8e:e6:aa:62:e3:89:42:
4e:d7:85:24:13:81:0b:50:4b:38:0c:36:1f:09:63:
90:11:de:6d:0f:ef:c9:66:e6:e5:bc:e2:6c:92:e2:
6a:f5:1f:a7:fd:32:7f:09:ac:85:6b:4c:39:31:4a:
0d:1e:6a:60:a4:7f:6e:bf:78:6f:8e:ce:41:f7:4a:
59:76:d3:98:27:98:50:11:8a:24:b2:79:14:17:75:
6d:05:b3:5f:a2:98:96:fc:23:e8:a1:0b:77:e9:d1:
b1:09:cb:c7:27:85:2c:27:88:27:db:14:02:44:71:
6a:d2:a6:b7:d9:19:37:b7:7b:8f:a8:7d:ea:be:09:
2c:f4:35:43:13:9b:f6:2f:8d:4e:d0:ff:9d:92:8a:
ac:fd:2c:f4:53:35:95:8e:97:8f:39:d1:96:9b:a6:
86:61:bd:9c:d9:5d:3c:bb:0b:8e:db:2c:32:fa:19:
0e:d0:1e:de:0d:cc:de:27:9e:94:d8:dd:0d:ee:03:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:5E:DC:9F:36:85:09:A7:61:0D:69:5E:54:08:99:51:87:6A:6D
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:81:3c:b4:01:e9:53:8a:e0:b0:52:43:44:11:99:9f:58:d6:
95:52:f0:2d:39:11:d5:ec:67:09:68:99:cb:b5:51:c6:a7:a0:
35:90:ef:bb:e7:47:7a:1c:a1:1c:de:0b:3b:ea:da:99:2b:76:
f4:64:d9:b5:d0:6e:8f:98:b0:51:8f:33:30:d4:dc:47:8a:1b:
83:a0:72:5d:66:e9:d6:6e:ee:29:31:9a:40:17:e8:75:10:34:
11:fb:20:b8:a3:9b:c1:b6:52:75:b4:57:96:48:c2:e2:db:d8:
bb:e5:15:99:93:18:e2:9a:58:74:44:0c:17:fe:6f:36:2b:22:
a5:41:7c:62:d6:b9:d3:a5:9c:8e:0f:4e:3f:05:81:32:9c:91:
a3:c9:75:5b:f3:22:10:df:24:29:6e:18:14:99:95:a1:eb:48:
06:3c:23:d9:44:ab:d7:8d:d7:e4:bf:3b:87:05:bf:ef:f6:9c:
f3:fe:87:51:5c:13:bc:6b:4d:cd:7c:59:74:fc:9e:ff:8c:7e:
38:70:e6:20:d7:dc:f8:1b:0f:fe:f7:ed:cb:ef:04:c8:7e:22:
b3:38:60:a7:8f:65:28:6c:01:bb:bd:f8:8c:8e:c2:a4:13:4c:
af:d0:e5:8c:74:c0:24:ca:4c:13:8e:64:a0:03:1d:61:13:af:
72:1a:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:32 2025 by rpki-client