Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: H7xrJjS0NN18fF5/EpPN3qC7kZZWgeolxrJuPSHsWlo=
Subject key identifier: DD:DD:82:05:B6:AA:79:19:37:F1:A7:0D:C2:40:30:28:43:DB:B9:3A
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0197470C0369013175DA3891D7697B44C3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1277
Signing time: Fri 06 Jun 2025 21:00:59 +0000
Manifest this update: Fri 06 Jun 2025 21:00:59 +0000
Manifest next update: Sat 07 Jun 2025 21:00:59 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: io/70/oBok6RjYi5l5hvybRyYdq9TooygkiSvEF7hV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:03:69:01:31:75:da:38:91:d7:69:7b:44:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Jun 6 21:00:59 2025 GMT
Not After : Jun 7 21:00:59 2025 GMT
Subject: CN=dddd8205b6aa791937f1a70dc240302843dbb93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:75:9d:72:c9:cc:a1:05:03:6f:ff:a0:a0:
c5:a1:6a:08:03:38:fb:b8:25:cd:f3:d8:44:3f:94:
cb:20:83:6d:a1:38:25:e3:a8:12:b4:f1:68:8d:2f:
b7:78:47:1c:7d:e7:26:ad:9e:ba:20:0c:41:d7:86:
cb:c4:70:e8:7f:cc:c1:ae:d3:15:44:8b:9c:6e:26:
ec:6c:5b:50:d1:c1:19:0a:bd:85:29:a1:80:5f:2f:
72:45:bb:32:5e:3e:b7:cb:34:98:3a:97:83:df:dd:
4f:32:d9:fa:da:06:a5:b9:c8:7b:47:04:bc:aa:e9:
f3:c4:c4:b5:2e:a4:f6:41:13:17:9f:44:c4:88:b7:
66:42:e5:b5:c3:24:42:f7:59:c6:cd:ef:61:f9:ad:
37:b2:69:dd:c7:70:cd:73:79:b2:b8:29:82:3a:bc:
39:62:77:8c:44:8c:30:5b:7c:c7:44:82:ac:99:72:
92:a9:3b:7c:76:b6:5c:e4:1e:ba:bb:df:3e:c7:61:
42:ea:0f:ba:78:11:56:46:18:5f:bd:e9:eb:f6:bc:
56:1f:5e:23:72:2f:2b:2c:67:aa:47:44:ea:fa:4d:
67:c2:0f:1d:42:93:e0:11:51:15:0b:24:0a:4d:53:
2f:a3:df:7d:92:7a:c3:e5:b0:fd:db:b1:17:7d:56:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:82:05:B6:AA:79:19:37:F1:A7:0D:C2:40:30:28:43:DB:B9:3A
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:01:12:36:1d:cb:fa:71:ee:eb:0d:a7:71:2e:c5:af:5f:
ef:34:ac:f4:80:5c:59:78:7c:82:b0:19:a5:b4:41:db:1a:77:
f6:46:08:80:cd:6d:44:f5:72:31:8c:07:e0:eb:53:0f:65:5a:
75:55:8f:11:a3:61:fa:b4:30:a3:16:1a:28:4e:95:2b:6b:0b:
94:72:d6:bf:bd:ea:14:6d:fe:f8:56:25:d6:92:ce:67:8a:d4:
0b:38:e5:e7:8e:1b:68:4a:0e:5c:70:be:2b:b4:52:56:67:71:
aa:89:ba:a6:b8:1b:34:a3:93:b0:8c:c1:c5:9e:5e:4d:19:4e:
c0:e8:69:e9:70:e9:45:81:0d:d8:1f:7d:61:80:57:c9:08:32:
f1:d5:92:ee:01:fc:13:47:db:28:ef:81:c8:d9:19:ca:11:f5:
55:b3:50:5f:02:06:f0:0c:bc:4a:39:6e:95:51:82:46:86:6c:
b7:84:6f:fe:5c:7a:1b:e8:25:9e:14:88:71:45:81:52:b2:a6:
d8:53:40:4a:0e:47:34:28:36:a5:a5:7f:82:4f:9d:7d:ed:4f:
6b:97:f8:16:33:22:9b:70:80:a9:38:fa:80:cc:52:e5:e6:2f:
95:f0:85:12:fb:ca:3f:f9:64:bf:75:dc:ba:e5:15:b9:96:bf:
1d:fe:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:18:40 2025 by rpki-client