Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: k3l4XQZmLvijDyC8MGqH1T5EUbDHztl5DUucSzs/V2c=
Subject key identifier: DC:94:1E:11:0B:A4:B4:F6:82:24:9F:EE:21:63:42:60:1B:1D:5F:67
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019872624CFA09C71338CF72ABDDEC427536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 00:01:41 +0000
Manifest this update: Mon 04 Aug 2025 00:01:41 +0000
Manifest next update: Tue 05 Aug 2025 00:01:41 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: gsJdsWR76jBtBDhDCHNSspCDeXF1nz1kMNEcb+JmFaw=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:4c:fa:09:c7:13:38:cf:72:ab:dd:ec:42:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Aug 4 00:01:41 2025 GMT
Not After : Aug 5 00:01:41 2025 GMT
Subject: CN=dc941e110ba4b4f682249fee216342601b1d5f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:16:ab:1b:8c:47:53:37:d6:ab:f9:27:93:
fd:7d:3d:0e:fc:8b:dc:1b:4e:d8:82:d9:8c:7b:a7:
6f:c8:97:bc:68:99:69:9a:c1:57:2f:f7:11:0e:3f:
c4:fd:1a:00:b3:7f:3a:5b:d4:4b:59:a6:2b:7e:d8:
35:15:f6:21:7d:c7:59:e8:38:00:c7:b4:d6:84:d4:
2a:64:1b:6f:52:da:2d:bb:05:9d:be:e6:7a:c4:52:
49:08:b6:9b:51:5e:95:25:3e:f3:06:4e:18:d6:29:
2a:db:64:8a:83:8d:15:10:d9:a8:72:7a:76:ab:27:
99:32:84:ad:67:84:94:58:88:2e:4c:70:7b:de:a2:
7a:f0:42:ec:06:df:06:3e:3f:bb:d9:50:8a:dd:8e:
73:d5:61:34:f9:e5:bf:12:84:e0:3c:76:64:51:83:
2f:c1:2c:75:66:87:94:60:2b:2a:14:cc:56:5e:02:
d2:52:6e:9e:2c:ab:85:94:d9:58:6e:79:7b:c8:df:
50:b6:6e:60:b8:e4:6c:62:64:15:8d:d5:92:3e:23:
e9:17:bd:b7:39:e4:ad:e9:ca:bc:68:21:a6:99:df:
72:c6:53:eb:9e:40:58:ff:fc:c0:83:d0:ea:3e:f4:
9e:87:5d:f1:06:74:09:9a:9f:d6:19:42:bb:62:9c:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:1E:11:0B:A4:B4:F6:82:24:9F:EE:21:63:42:60:1B:1D:5F:67
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9a:5a:d0:96:da:b1:a0:9d:d5:a3:94:3a:e5:73:bf:01:dc:
d2:0f:b1:fe:eb:78:6a:92:4a:a8:96:6e:84:f7:62:46:b6:77:
93:a8:a7:6a:bf:aa:59:6d:00:a8:fc:17:6e:4e:21:91:bd:9c:
f6:48:a7:10:25:bb:12:c3:a0:8f:8f:ee:59:f2:dd:2f:17:a5:
e4:f7:97:30:f7:61:fe:3f:43:0d:14:60:6b:f0:0c:4d:ab:7b:
6f:b1:c1:13:bb:f2:29:7c:aa:a9:4c:f0:af:f5:f1:5d:16:48:
56:ea:f2:9a:39:cd:a8:77:e4:04:c6:9f:99:1d:ea:b9:56:7b:
ff:1c:98:f6:ee:5d:42:59:97:9e:aa:a8:0c:70:0e:33:9f:31:
6d:ef:48:b0:f5:0a:84:bb:b8:c6:36:38:a7:be:62:b4:4a:39:
c0:da:7e:3a:69:34:b8:44:17:01:c5:a6:4e:ab:6c:9d:40:7c:
5b:a1:28:d4:fe:22:37:ad:ee:e5:8e:11:7a:bf:57:d6:e6:cf:
e8:29:0f:9d:63:4d:a0:12:dc:36:e0:39:f2:b1:a4:7e:ee:8c:
dc:96:9d:89:f6:8c:23:1f:99:26:63:60:98:60:6d:1f:bb:43:
6d:3f:39:6a:b2:3a:42:09:e2:9e:52:be:a4:d8:ba:1d:ba:a2:
c0:33:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:13 2025 by rpki-client