Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: 4NOZGqYPSL2mIdsHPnXMUagU9gK2y1X+O6eGQlD/w+s=
Subject key identifier: 7B:30:AB:B5:7E:91:6C:AB:E8:4A:81:C4:A4:17:B2:1B:13:46:50:A5
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019746669960CFA1119D6E3E899EB2D5F93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 18:00:18 +0000
Manifest this update: Fri 06 Jun 2025 18:00:18 +0000
Manifest next update: Sat 07 Jun 2025 18:00:18 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: yAJQ0fM0EOkgOr9MFLpZcrk2rtf8C5X2FS9UIdaOZMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:99:60:cf:a1:11:9d:6e:3e:89:9e:b2:d5:f9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jun 6 18:00:18 2025 GMT
Not After : Jun 7 18:00:18 2025 GMT
Subject: CN=7b30abb57e916cabe84a81c4a417b21b134650a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:02:00:90:3b:8a:7d:31:59:f7:73:56:90:
74:b4:e6:f8:80:34:3d:da:0d:9d:40:67:8d:1a:4d:
28:6b:3c:7f:3b:19:24:43:0e:69:96:c3:d8:e5:d1:
df:fa:ce:29:89:be:d9:7a:41:43:44:73:0c:8f:74:
ad:71:3b:30:ff:b5:16:ea:c9:2b:3a:fa:48:69:67:
5e:0c:c8:3a:fe:cc:8f:ad:4d:84:91:4d:bc:c3:76:
d6:40:8e:34:73:7c:4e:60:dc:f0:a7:e0:49:74:72:
47:63:04:49:61:86:b3:62:7b:35:bc:a5:21:3e:88:
17:a5:58:7c:a6:25:2b:5b:56:5b:0f:7b:16:6f:f7:
d4:c7:49:14:cf:cf:da:aa:49:3f:ab:ce:6a:70:65:
15:51:10:f6:11:bc:31:8b:c5:0d:fe:c1:2c:3b:8d:
d0:7e:07:ee:67:cb:eb:0a:39:f9:86:53:c3:51:b8:
05:ee:fb:b1:3d:6e:d7:b0:79:bc:64:fb:71:34:a1:
9a:72:c6:b8:c7:de:67:45:7d:0e:b9:cc:e0:e0:fc:
95:97:54:ee:1f:49:db:45:8f:05:05:0f:76:d6:58:
73:1b:6b:18:1e:d1:ef:6c:79:8d:10:f9:be:2a:ef:
c2:66:4b:5c:7c:51:ed:73:2b:08:b3:ef:e6:3e:bb:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:AB:B5:7E:91:6C:AB:E8:4A:81:C4:A4:17:B2:1B:13:46:50:A5
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c4:1e:d6:5a:da:2a:cc:2a:cf:f4:2a:c4:15:c8:05:43:e2:
2f:3c:cf:5f:31:05:2f:b0:5f:5b:05:77:7c:2a:d6:90:41:88:
64:15:a7:85:58:45:f5:8d:27:78:7e:ab:8c:3a:05:fc:ed:bc:
86:1a:e9:a6:bb:d0:3d:69:26:76:f6:5d:a8:f0:10:25:28:10:
d2:36:26:f6:f9:da:94:51:64:dd:79:3a:7c:a4:ca:1d:40:e7:
0f:36:70:50:db:4b:39:6d:69:df:ac:92:69:60:b7:6f:be:b2:
fa:ee:89:8a:ec:a8:36:f0:f0:a7:6f:f7:9a:4d:9b:d2:91:16:
fd:81:72:cc:f3:6e:24:35:4a:ca:5d:ca:8b:cc:5c:f3:4b:07:
2d:b4:38:8a:9e:54:ee:91:6a:57:e8:76:13:c5:4b:76:b1:5d:
53:92:4a:5a:e3:c6:28:cd:62:a1:36:be:81:65:1e:72:28:1b:
b6:5c:10:51:39:28:15:7c:a6:ef:38:d5:8f:32:7a:c3:9d:bc:
ce:05:52:e4:64:3b:24:cc:ec:0c:e8:01:cb:da:3f:83:56:f4:
7d:06:d3:86:99:03:3e:7f:68:d3:ea:c3:99:4f:b6:1a:2f:57:
1c:ac:ac:d3:35:35:7c:c1:ac:43:55:0f:01:76:f0:85:61:96:
77:3a:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:10:51 2025 by rpki-client