Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: PVotIH9n6ECnocp4yNVVdU2UpsPiOk17rW9QCppjggE=
Subject key identifier: D4:0D:C0:0A:F9:24:A8:DF:26:D2:E1:A4:9C:D1:69:AC:B8:D7:2F:6F
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 01976EF54F026B046F76C6B3A36AE6979589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0271
Signing time: Sat 14 Jun 2025 15:00:59 +0000
Manifest this update: Sat 14 Jun 2025 15:00:59 +0000
Manifest next update: Sun 15 Jun 2025 15:00:59 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: mDG2XBuuowL/0pijIJvpcNSeffrOVTYFTyq+ONCCZ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:4f:02:6b:04:6f:76:c6:b3:a3:6a:e6:97:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Jun 14 15:00:59 2025 GMT
Not After : Jun 15 15:00:59 2025 GMT
Subject: CN=d40dc00af924a8df26d2e1a49cd169acb8d72f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:21:34:eb:41:18:a6:f5:50:14:3a:e6:c5:
aa:af:fd:46:f9:60:c6:b6:27:58:b4:b6:8c:7c:2f:
43:54:53:4b:a1:bc:46:c7:c7:a0:9b:e4:c0:72:d4:
6e:7c:bd:4b:ab:5e:e2:5e:da:bb:29:81:42:83:2b:
95:78:69:0a:6f:a7:32:d6:ed:f2:6c:b8:e7:62:fb:
11:ee:c4:13:61:d2:bc:8e:53:82:5d:26:d0:47:1a:
1c:06:e0:df:3f:f9:d4:26:8e:fe:97:8f:84:66:40:
6d:25:18:f2:37:2e:40:29:e0:b6:30:d7:a8:02:3d:
eb:0b:01:8c:56:6a:3f:9b:d6:a0:a0:e3:2f:3b:cf:
3c:ac:2f:93:6d:16:89:bf:f9:ce:7c:28:25:69:2f:
2b:dd:1a:fd:2e:fd:8d:e7:99:88:b8:bf:25:8e:ce:
ce:35:c8:51:12:96:be:b1:6c:4b:03:a8:5b:d4:2d:
ec:c3:02:f4:1b:58:1d:24:97:c1:62:ba:d2:9f:c6:
66:cf:26:85:c9:8f:97:ec:bf:63:bb:67:78:9a:0c:
b6:83:5b:c7:84:03:92:32:6a:5b:d9:81:a2:77:3d:
36:7e:73:69:2b:88:06:b8:3c:c8:67:1c:a6:15:6c:
f9:b1:a7:7b:c3:b3:47:dc:1a:89:ea:1f:e7:28:57:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:C0:0A:F9:24:A8:DF:26:D2:E1:A4:9C:D1:69:AC:B8:D7:2F:6F
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:35:ce:7b:19:20:61:ca:8c:96:81:d1:eb:a5:17:dd:0b:da:
21:10:f5:b6:87:50:e1:07:88:9e:a7:fe:4f:03:2f:35:e8:8a:
57:95:ec:e2:fb:f0:44:a5:9d:79:55:04:9e:49:99:8e:40:02:
f9:a2:f2:73:dc:f1:e1:ff:39:13:48:69:5f:7c:db:18:40:8b:
0b:cd:80:b9:93:74:d6:04:e2:ca:2d:07:bc:bd:e0:ac:6c:d5:
42:16:e7:03:57:c4:52:56:f4:5d:49:63:60:87:cf:17:6a:67:
e8:19:3d:0f:0a:c8:97:ba:6c:6a:8d:2d:15:20:af:10:8e:69:
80:9d:5a:e0:17:02:6b:ad:0e:c0:0b:ea:6e:12:51:a8:e4:f5:
cc:7a:e0:51:b6:b3:27:ff:be:54:85:32:02:e0:93:96:9b:81:
99:06:a6:ff:3f:cc:62:b0:09:e8:e3:8a:4b:19:f3:7a:f0:63:
c1:3f:84:08:84:3a:8e:09:0e:05:6f:7a:2a:df:da:07:50:d1:
2b:9b:6e:ed:7b:fd:62:3a:4a:7b:9f:31:94:b6:4d:82:06:21:
6b:6e:86:9f:8e:f9:a3:f0:e7:59:18:1c:e3:30:cf:53:bd:7c:
8a:be:af:b0:5f:8d:b4:8d:97:b3:30:fc:fa:3e:6a:92:a7:52:
92:5d:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:21 2025 by rpki-client