Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: gbTRXTbOHeDbfIl9p/aUXAgUI91AelIVXgYA2SgNENg=
Subject key identifier: 57:5C:90:69:FB:F3:82:5A:BE:02:51:EB:89:3A:0D:36:2F:C7:2A:0C
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01974C69D894EA2250ECB16CEB0AF7501EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0E2C
Signing time: Sat 07 Jun 2025 22:01:34 +0000
Manifest this update: Sat 07 Jun 2025 22:01:34 +0000
Manifest next update: Sun 08 Jun 2025 22:01:34 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: vnQtjukYGIQWR23/8Wd6AIluk25E8+/14nRehbgpRIQ=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:d8:94:ea:22:50:ec:b1:6c:eb:0a:f7:50:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jun 7 22:01:34 2025 GMT
Not After : Jun 8 22:01:34 2025 GMT
Subject: CN=575c9069fbf3825abe0251eb893a0d362fc72a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:57:67:99:ab:d3:c7:66:da:74:dd:ee:9f:
12:51:40:03:42:b9:0e:b9:bd:36:09:b1:d8:ba:7b:
aa:a4:bd:fd:f7:5d:2d:18:6e:3b:cf:ba:00:1a:14:
a0:d4:36:a5:53:01:25:65:67:2d:1c:ac:b3:3d:ee:
6d:a0:6d:4f:e1:2d:f8:1a:fe:5a:bb:3c:1c:84:79:
11:1f:fc:21:dd:bd:f4:85:a7:2c:48:a6:ad:ec:9b:
4a:04:6b:61:fa:5d:f3:f4:13:61:01:4b:85:ae:42:
2b:2f:76:b3:ae:ce:08:07:54:a3:77:78:8f:f0:b8:
58:ef:3a:c7:cd:c1:f8:87:3b:58:30:70:5b:ca:03:
e9:fc:74:61:ea:71:0e:af:9b:d2:46:f0:42:41:11:
eb:be:03:3c:39:83:ca:a2:3d:6c:60:82:b0:79:68:
6c:f0:a8:39:73:45:f4:8a:76:13:4c:99:6d:c2:f8:
5c:99:09:27:12:79:af:e4:5e:98:49:f1:29:4b:66:
6e:90:b8:e8:7b:78:4f:7d:a6:2f:bc:7f:47:40:24:
09:ab:ea:59:77:d3:2b:59:9a:60:c6:89:9a:4a:40:
eb:ca:2f:f8:f5:63:1a:28:67:90:3a:a7:90:15:5b:
f1:af:0c:a0:8b:45:6f:75:61:27:69:b6:ff:b3:77:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:90:69:FB:F3:82:5A:BE:02:51:EB:89:3A:0D:36:2F:C7:2A:0C
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:91:2a:26:75:e4:42:9a:26:b3:ba:75:d5:b4:6d:62:22:51:
a1:7b:a4:24:af:6f:0e:4b:a8:51:dd:b0:b4:36:91:d1:3f:b7:
ba:40:99:cf:c9:1f:81:6b:9d:e8:4c:ec:9e:60:4c:de:c4:0c:
55:c9:95:4d:1f:72:f4:2d:8c:83:06:71:c8:47:7f:b7:a8:6b:
6f:11:6c:2d:57:11:82:ba:fb:5b:45:70:06:81:b5:c6:74:e4:
41:9b:4a:af:5d:9b:d8:15:a8:9f:3a:32:9f:57:ca:d1:c7:7a:
53:46:58:cb:b5:dc:a3:99:78:09:67:6b:2c:9c:23:26:13:e2:
cd:78:41:f5:44:86:0b:58:7d:cc:09:53:09:a8:2d:20:d7:cf:
ab:9f:ed:58:39:b9:81:ba:cd:dc:1a:39:f8:69:68:09:f3:85:
12:86:f1:c3:d6:a6:65:c2:7b:cc:38:7b:ce:20:19:53:03:61:
7d:ed:cc:50:fe:40:09:3f:28:70:58:56:b1:f8:b6:ac:da:17:
de:d6:ea:6c:80:56:81:63:24:36:df:06:68:e7:4e:a4:f1:99:
08:aa:96:50:e8:fa:80:03:b3:a9:e7:af:29:de:c4:3e:1e:10:
57:3c:83:82:47:17:88:d3:7b:11:dc:71:2c:37:06:7b:ad:2b:
95:39:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:01:27 2025 by rpki-client