Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: cejo78Wz7VGPX9Zb5lVUFC+IfltUfXpv/G4DxL5eT8A=
Subject key identifier: F1:93:84:54:30:DD:0F:84:93:D8:20:89:2B:0B:ED:E7:96:48:86:C4
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 01978A6C270DC0CC176A60724238D8A5B606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1284
Signing time: Thu 19 Jun 2025 23:00:33 +0000
Manifest this update: Thu 19 Jun 2025 23:00:33 +0000
Manifest next update: Fri 20 Jun 2025 23:00:33 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: 6Q6yWjRNtFU0LYLsvMSrXYaD7WfrFLi1h0tamwUFqJI=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:6c:27:0d:c0:cc:17:6a:60:72:42:38:d8:a5:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jun 19 23:00:33 2025 GMT
Not After : Jun 20 23:00:33 2025 GMT
Subject: CN=f193845430dd0f8493d820892b0bede7964886c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:44:06:6b:67:da:f4:d5:85:f1:c8:8e:c6:
7e:d8:80:7b:ea:97:a2:c8:52:95:fc:ff:e6:5e:41:
01:05:50:a4:04:ca:a5:61:fd:b8:18:15:26:c3:24:
1f:73:96:55:29:98:37:22:5b:2c:59:7e:53:2c:3f:
62:6f:e9:bd:b8:b9:65:02:64:59:df:df:37:9c:97:
44:5c:3c:7f:49:9d:4a:5c:3a:fa:47:e8:41:c5:04:
b1:21:7a:a6:b0:ae:6a:c5:f8:3c:2b:39:0c:58:98:
1c:9e:cf:88:f2:3d:eb:6d:0c:28:55:7e:55:9d:8d:
94:79:ba:32:71:0c:54:4b:e2:fd:7b:34:d6:a2:e1:
ba:0c:93:dc:e4:72:69:da:0b:5c:25:19:49:e8:fe:
52:5a:74:f5:7a:9d:5c:a1:11:c0:51:5f:5e:d7:26:
35:b3:9c:1c:77:b8:84:25:28:dd:c9:2f:1c:99:32:
ef:ca:cf:b7:6b:4b:b6:ad:50:f5:86:22:13:fa:a3:
46:20:0d:19:03:c0:b4:64:63:11:3d:8e:85:53:4d:
50:d0:93:e3:cd:88:30:c0:a0:f1:44:6d:22:aa:6f:
9f:1a:45:56:76:a0:20:82:e9:74:e5:88:8d:74:07:
3a:3d:13:8e:9a:e7:b4:9f:7e:30:64:d5:b2:95:8f:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:84:54:30:DD:0F:84:93:D8:20:89:2B:0B:ED:E7:96:48:86:C4
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c6:c5:9b:ce:39:00:0b:ad:d9:75:96:0a:41:1f:57:94:4f:
7e:b8:28:a1:8a:34:de:d4:a9:22:7b:d1:30:f6:12:fc:90:2b:
98:d1:bf:f7:ed:cd:39:e3:d1:07:4e:56:af:fc:23:6d:a1:d8:
d8:55:54:6a:e3:fa:9e:69:aa:fd:3f:e3:1d:b5:21:e3:18:98:
6e:c0:23:e5:b8:1c:ad:9e:3a:f6:24:3c:a5:73:3b:6f:68:01:
95:0f:dd:10:78:16:c2:4f:55:52:99:2b:a2:30:b2:74:cb:28:
51:9a:8d:1e:ec:01:05:8f:67:ce:43:c0:be:a4:55:78:d8:97:
3f:7b:f1:7a:c0:23:fb:89:21:a5:ae:e4:59:b3:34:09:1f:d4:
75:ff:48:23:dc:2e:9c:90:a5:79:97:aa:03:fa:95:12:e7:d3:
3c:3f:d0:2a:0c:fa:4f:c5:6a:54:2b:f7:8d:d1:bd:8b:61:84:
ba:e4:56:4f:7c:dd:19:15:98:39:25:7c:87:3e:4c:f6:2c:cd:
c2:c5:5c:fd:9c:41:92:bb:e5:8f:1e:e0:71:97:72:d9:69:06:
5b:90:6c:f8:a3:82:f2:78:0e:2c:3f:12:ec:b2:3e:62:00:3d:
da:f1:52:b7:b7:1b:7d:72:9a:f3:86:fb:83:6f:0f:13:09:4b:
02:47:4f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeKbCcNwMwXamByQjjYpbYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh
M2Q3NGQwHhcNMjUwNjE5MjMwMDMzWhcNMjUwNjIwMjMwMDMzWjAzMTEwLwYDVQQD
EyhmMTkzODQ1NDMwZGQwZjg0OTNkODIwODkyYjBiZWRlNzk2NDg4NmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB5EBmtn2vTVhfHIjsZ+2IB76pei
yFKV/P/mXkEBBVCkBMqlYf24GBUmwyQfc5ZVKZg3IlssWX5TLD9ib+m9uLllAmRZ
3983nJdEXDx/SZ1KXDr6R+hBxQSxIXqmsK5qxfg8KzkMWJgcns+I8j3rbQwoVX5V
nY2UeboycQxUS+L9ezTWouG6DJPc5HJp2gtcJRlJ6P5SWnT1ep1coRHAUV9e1yY1
s5wcd7iEJSjdyS8cmTLvys+3a0u2rVD1hiIT+qNGIA0ZA8C0ZGMRPY6FU01Q0JPj
zYgwwKDxRG0iqm+fGkVWdqAggul05YiNdAc6PROOmue0n34wZNWylY8aKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGThFQw3Q+Ek9ggiSsL7eeWSIbEMB8GA1UdIwQY
MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct
NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm
LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8bFm845
AAut2XWWCkEfV5RPfrgooYo03tSpInvRMPYS/JArmNG/9+3NOePRB05Wr/wjbaHY
2FVUauP6nmmq/T/jHbUh4xiYbsAj5bgcrZ469iQ8pXM7b2gBlQ/dEHgWwk9VUpkr
ojCydMsoUZqNHuwBBY9nzkPAvqRVeNiXP3vxesAj+4khpa7kWbM0CR/Udf9II9wu
nJCleZeqA/qVEufTPD/QKgz6T8VqVCv3jdG9i2GEuuRWT3zdGRWYOSV8hz5M9izN
wsVc/ZxBkrvljx7gcZdy2WkGW5Bs+KOC8ngOLD8S7LI+YgA92vFSt7cbfXKa84b7
g28PEwlLAkdPMg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 02:53:28 2025 by rpki-client