Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: z4CIwQYzsSgYHY4vZnlNcbYnioi654EUr6X+PpjRX/E=
Subject key identifier: DE:36:46:A6:AB:31:9F:73:48:8F:67:1C:3A:4C:4E:7C:23:FC:71:02
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 01976DAB5711ED0F4F33E27FA7BFAE17FFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:00:34 +0000
Manifest this update: Sat 14 Jun 2025 09:00:34 +0000
Manifest next update: Sun 15 Jun 2025 09:00:34 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: MRGpd9rI0J7lJztopKKzQXK+5u6qYVGBziW1k0HW9YI=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:57:11:ed:0f:4f:33:e2:7f:a7:bf:ae:17:ff:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Jun 14 09:00:34 2025 GMT
Not After : Jun 15 09:00:34 2025 GMT
Subject: CN=de3646a6ab319f73488f671c3a4c4e7c23fc7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:2c:54:53:8c:f0:94:25:26:7e:48:29:ad:
8a:d0:6e:a1:59:b4:50:80:64:df:be:82:b3:5a:54:
63:22:16:45:0e:6e:eb:96:60:e4:3f:80:44:cc:19:
4e:2f:43:8d:1f:79:cc:e3:a4:53:ef:45:2b:cb:eb:
e9:f9:b8:4e:ac:37:32:11:0c:b5:29:c5:1d:a8:b6:
7b:38:57:98:14:c6:01:bd:dc:4b:e1:d2:3c:ea:21:
fc:11:f7:bf:0d:fb:34:25:78:d5:c0:5c:22:c3:d1:
b8:d8:a6:1a:b8:7b:d2:8f:dc:17:de:4b:3d:db:13:
75:1f:cc:df:d9:b8:74:46:4f:c7:49:6b:8e:65:29:
88:e7:94:3a:e5:eb:44:54:08:d1:57:6c:87:29:95:
41:73:ac:2e:20:de:92:67:41:6c:74:fe:7e:4b:16:
83:7a:e8:d0:57:d4:1f:c7:c1:5a:e6:57:2d:72:f4:
12:53:8c:d8:36:4e:22:ca:10:df:c0:7c:6c:e2:a5:
55:85:b1:41:84:2a:32:d3:5e:59:1e:ff:77:e4:c2:
65:53:b1:30:53:f1:9d:f5:f2:80:e5:5d:40:d1:23:
32:46:6f:78:91:e5:5d:f7:ce:38:d0:20:c3:0e:9a:
24:93:02:19:a2:ff:ef:56:49:ae:2c:56:62:7f:8e:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:46:A6:AB:31:9F:73:48:8F:67:1C:3A:4C:4E:7C:23:FC:71:02
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:ef:cb:0b:35:51:ba:0e:cb:e2:b8:2e:a3:37:ff:38:85:
df:6f:08:e2:e9:8a:c8:4e:51:ef:46:6d:87:2c:eb:8e:ce:c1:
c9:b3:7b:94:dd:09:cd:ba:48:e8:e2:07:62:97:38:59:ac:ba:
40:c0:75:0d:68:3b:ea:d1:9c:15:bf:83:bf:d6:93:22:24:e8:
42:91:c1:2c:a4:44:11:81:a9:b9:99:e8:c6:7e:ff:c4:a3:6b:
56:f7:f1:c1:d5:e0:11:c9:85:b4:60:9d:0a:34:69:65:5a:d5:
e2:e4:0f:5a:9c:7a:96:eb:fa:0d:a3:ae:93:39:cd:85:98:7e:
5f:86:54:89:be:06:77:13:b4:d7:c3:ea:8d:91:26:6e:f7:22:
ce:18:17:3a:f5:89:4f:7a:40:ad:4a:d9:0d:1b:61:83:f6:55:
3b:94:82:c8:f0:ea:1a:f8:c3:8a:35:e3:06:25:3c:1a:22:d0:
6f:18:8d:6f:c1:e4:21:6c:41:f8:7f:ab:45:16:7e:9a:59:aa:
9b:d6:6d:34:2f:a5:1d:38:8a:f2:a1:c0:bc:ea:a1:58:b0:0a:
a0:c5:a9:4b:2a:e7:29:a8:8a:c0:f5:cc:ef:de:33:dc:31:72:
2e:7a:3e:bf:32:3a:c6:e0:75:34:52:39:65:ca:ae:d0:91:53:
b3:63:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:12 2025 by rpki-client