Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: CJcEh4/p+ouWB/R47ERnc6ZPlQy8Ra1mtvg6EiFI8mg=
Subject key identifier: 6B:E0:5E:A4:22:92:8E:8E:D8:FA:D1:99:4F:88:6F:74:BC:71:13:BC
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 01976D3D6D3FBEC6196F94029E6C3C1F170B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 0F20
Signing time: Sat 14 Jun 2025 07:00:31 +0000
Manifest this update: Sat 14 Jun 2025 07:00:31 +0000
Manifest next update: Sun 15 Jun 2025 07:00:31 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: pyaziVHYW5H+xLsUUpo5BSEUAYuVP8vBofYXIzt3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:6d:3f:be:c6:19:6f:94:02:9e:6c:3c:1f:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Jun 14 07:00:31 2025 GMT
Not After : Jun 15 07:00:31 2025 GMT
Subject: CN=6be05ea422928e8ed8fad1994f886f74bc7113bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:69:8d:d6:45:38:01:e3:4f:66:36:1f:4e:
a5:07:8c:01:96:c1:31:d8:a5:6c:c2:91:24:4e:bf:
d7:8b:70:fc:7f:89:31:fd:f9:35:67:bf:b5:d8:02:
f0:96:80:16:f2:8b:6b:ee:e9:5a:d2:d4:fc:e9:77:
67:ec:63:65:be:60:51:10:c4:d6:59:1a:fe:27:d8:
39:bf:ee:93:c7:3f:c0:1f:fc:4a:c4:3c:28:6d:9d:
b1:da:d6:d9:b1:e5:49:10:ac:46:b8:86:2f:43:3f:
15:e2:0e:2c:28:f9:27:6d:1d:74:bd:df:c4:e8:44:
92:0b:a4:a5:44:3e:11:b6:a4:58:19:2c:16:6c:5c:
5c:6c:36:b2:47:80:09:85:82:6e:75:87:ac:36:42:
bd:bf:21:a7:1e:42:07:01:27:d3:cf:53:03:0c:d7:
e7:5e:58:26:5b:1b:86:52:ee:cc:70:84:cd:c4:2e:
12:27:20:05:15:df:35:de:a7:78:7b:97:7c:5f:0c:
de:d3:68:64:10:b9:0b:dc:c9:5e:86:82:d5:4e:68:
44:33:f7:09:3a:37:63:ce:23:9f:a9:65:73:c1:a6:
d4:02:a5:57:14:31:0a:00:5b:46:de:77:0a:0a:23:
e9:1b:fb:e7:69:43:21:b7:3d:84:29:10:71:ab:af:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:5E:A4:22:92:8E:8E:D8:FA:D1:99:4F:88:6F:74:BC:71:13:BC
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:44:97:7f:32:2c:9c:e1:56:73:d1:f2:b2:fc:4a:79:8a:19:
39:2b:d2:4d:a9:b4:e3:cd:eb:9c:b4:df:db:4d:36:a8:2e:57:
26:43:a6:6d:51:73:a0:3a:8d:b6:f4:ca:1b:2f:7d:30:a4:36:
3f:3e:76:01:47:9a:d2:99:aa:e9:cd:be:8e:0a:0a:1e:80:1e:
a8:2b:24:ed:ab:91:1f:4d:7f:2a:96:42:cb:83:ce:cd:2e:fc:
4c:87:2e:69:0f:2f:de:96:b5:fe:c2:0e:37:30:80:75:90:d2:
2d:e1:0c:60:d7:ff:dd:14:9b:35:f9:28:1a:3c:ed:40:7c:65:
5c:83:e9:b3:ac:77:5e:17:83:ee:54:98:9b:f6:67:c4:28:ed:
61:c2:63:07:5e:24:d6:95:98:cd:dc:8f:ef:29:ae:36:17:c1:
01:3d:d1:a5:82:aa:60:69:96:c8:7f:2d:b1:eb:0a:ac:37:cd:
36:5e:39:aa:24:a6:ff:ce:e2:4d:ae:33:80:e9:e8:c7:14:16:
d1:0f:3e:98:26:0b:0a:7c:a8:09:39:84:d0:da:ec:0c:31:7d:
fe:51:e9:51:e6:f9:f1:9c:c4:14:8a:04:53:ee:14:49:6f:c3:
78:24:34:23:d9:8f:d4:93:be:05:31:69:18:da:39:da:07:d0:
64:1e:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:48 2025 by rpki-client