Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: SStaheF81gHcTzko7IMdiZodfNQg3O2eYVGDnM90LWI=
Subject key identifier: 0E:4F:11:59:98:11:A3:FD:8F:18:65:61:61:E7:2F:48:1F:70:64:1A
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 019769CF06C99B2C925BB0E22C7B0CDDBD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0296
Signing time: Fri 13 Jun 2025 15:01:04 +0000
Manifest this update: Fri 13 Jun 2025 15:01:04 +0000
Manifest next update: Sat 14 Jun 2025 15:01:04 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: PgcDCRMigpbRF6mjZ7+4Yf5p9iqckCmpzct8/aJ/pgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:06:c9:9b:2c:92:5b:b0:e2:2c:7b:0c:dd:bd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Jun 13 15:01:04 2025 GMT
Not After : Jun 14 15:01:04 2025 GMT
Subject: CN=0e4f11599811a3fd8f18656161e72f481f70641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:6e:e5:a1:33:cc:a9:07:c7:0c:9b:3b:a1:
54:88:4d:fc:4c:10:5e:4c:d1:fa:29:7e:08:1f:26:
4f:cc:91:a1:be:be:da:09:7e:1e:15:02:42:b5:f4:
6c:5f:47:5b:38:85:74:5e:a4:94:2b:32:a9:85:62:
37:14:5c:8b:9a:ea:07:07:37:e5:6a:0f:a6:dd:65:
2b:29:6b:45:82:53:b0:b7:00:09:59:56:f6:55:6a:
e8:df:72:5d:3c:bd:13:eb:d8:3b:aa:f2:91:c0:45:
01:0d:41:ab:a6:25:63:b7:f9:e8:eb:c0:77:8e:d7:
9b:9d:3e:38:94:4c:2a:a4:d0:6b:96:69:72:d3:dc:
35:51:cb:b5:af:2d:1b:5d:8b:73:6a:c1:2b:66:37:
e3:18:5b:61:7d:df:70:63:16:10:e7:d9:db:37:f5:
b7:24:f6:19:f9:e1:3d:3a:bd:e0:28:eb:06:48:a4:
c9:cb:a8:15:1e:2e:d9:9f:d9:14:97:7d:b5:2b:0f:
b6:40:83:01:65:e0:a1:97:4c:01:10:1c:04:bf:71:
fc:dd:b4:dd:8b:68:60:22:50:b6:0e:ef:5d:9c:cb:
8e:c4:75:7b:82:33:bd:50:8b:83:94:d4:31:70:6c:
7b:a9:e7:ab:0d:7b:b8:22:90:ed:bf:90:cc:8e:90:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:11:59:98:11:A3:FD:8F:18:65:61:61:E7:2F:48:1F:70:64:1A
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:5c:97:82:38:0a:82:15:12:69:8c:e5:f8:d9:73:03:d6:
0e:19:0b:9e:a9:04:3d:64:2f:c5:90:77:af:2d:f5:e6:98:07:
66:11:10:a7:e8:3f:73:b0:bb:88:a6:7a:a3:83:b0:b2:11:1e:
c7:cb:26:b6:a8:91:7d:34:2c:1e:39:df:6f:8c:aa:a1:92:58:
98:a3:57:9b:24:bd:60:ec:d2:ea:3d:48:90:f5:9d:7b:a1:05:
b5:8e:bf:db:8d:99:dd:7d:7a:27:f4:c5:b6:94:0d:79:e9:2a:
e2:26:ae:c3:0e:23:c5:f3:36:27:61:54:d9:40:ab:39:e5:c0:
50:15:8e:f0:d3:5e:49:52:64:ec:6f:c1:68:25:2c:c6:29:c1:
d9:96:7f:06:f7:ab:80:75:0d:5f:16:ae:8d:51:d5:4e:72:9d:
f7:f1:bd:64:cd:5d:d6:2f:29:10:53:7a:b3:7e:15:2a:c8:34:
22:9e:b5:a9:c2:b5:b3:11:67:51:de:d7:c9:fd:f9:9b:7a:e8:
96:58:39:1c:fa:42:eb:0d:88:9d:3e:68:6f:74:08:82:99:41:
5d:a4:a4:e3:f4:b8:02:ae:06:b0:30:0e:46:72:1e:0e:7a:ec:
2a:fb:b5:ad:d2:19:9d:f2:18:27:26:dc:1c:8d:78:74:e9:bb:
cd:4c:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:32 2025 by rpki-client