Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: wKm2jpgCVxBDUbme2JS/Ig5JpJnvOwGqmogGphBlhe0=
Subject key identifier: 7E:EF:A9:E2:29:28:88:D4:2A:0A:BF:A9:0A:7C:5A:E9:B9:CE:FE:75
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01978056843F3A80B4D5E64FC64D11A63DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 00:00:42 +0000
Manifest this update: Wed 18 Jun 2025 00:00:42 +0000
Manifest next update: Thu 19 Jun 2025 00:00:42 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: yNbyRwAIk0fgTWF0r15SrUIGYAJLSXzMe5pbE5R3z6w=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:84:3f:3a:80:b4:d5:e6:4f:c6:4d:11:a6:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jun 18 00:00:42 2025 GMT
Not After : Jun 19 00:00:42 2025 GMT
Subject: CN=7eefa9e2292888d42a0abfa90a7c5ae9b9cefe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7b:39:3b:1a:e3:81:bb:1a:4e:6a:16:2e:8a:
8b:b0:78:df:53:b7:79:25:fb:4c:36:d5:b4:35:c2:
7a:2e:7e:4d:32:66:b6:de:74:8d:30:3a:0b:27:a2:
fb:97:4a:a8:44:32:55:f7:4f:14:12:f1:36:64:31:
92:91:7f:c1:aa:b4:6b:36:4b:94:28:9f:ee:ce:3e:
54:62:99:7e:7c:65:b4:4e:be:1f:ce:d2:55:cd:94:
be:23:e1:19:e2:1f:fb:ee:67:4a:af:3d:62:25:2a:
e5:69:34:6c:08:fa:2f:fd:83:fa:92:97:2f:09:1c:
53:68:69:3f:05:ef:97:1f:74:5d:56:3d:df:03:d4:
21:b5:c8:e0:0f:cd:48:2e:96:85:a0:b2:2c:a9:19:
3b:72:14:ad:94:b7:c4:e9:1b:9b:d3:82:0d:9d:e1:
63:d7:14:a0:3f:78:0c:8f:d1:e9:41:94:03:3f:cd:
24:3c:f9:62:2f:11:68:c5:10:ec:1f:24:09:a3:42:
a4:a5:f7:d3:fa:a7:88:c2:9a:0e:5b:74:c4:b8:12:
93:68:f8:a6:c0:30:47:8d:d4:51:c7:e1:81:f4:01:
88:b5:54:43:70:6c:a9:f6:39:74:b4:03:b9:05:e8:
67:9e:5f:da:5e:e9:ba:a6:e1:04:e5:f0:e6:20:b3:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:A9:E2:29:28:88:D4:2A:0A:BF:A9:0A:7C:5A:E9:B9:CE:FE:75
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8b:2f:a1:a0:2c:78:af:3a:cd:91:24:ca:60:ff:11:aa:f3:
86:0d:7d:7e:28:fb:c5:bf:7c:eb:7e:97:45:a6:ac:05:5d:02:
cf:8d:0a:e8:4c:cc:50:1f:32:07:83:30:1a:51:4f:5d:16:5c:
d3:27:7a:18:39:a3:f3:84:f9:8b:de:c2:10:4b:f7:70:84:6d:
ea:78:58:59:36:77:f8:91:2a:cd:6f:19:1f:3f:60:63:42:45:
ee:54:d8:e8:bf:5c:8e:6c:e2:ee:ca:ef:fa:a9:a3:68:2f:66:
17:85:35:71:5a:e8:89:1a:55:32:4f:71:28:46:1e:51:38:ed:
d2:a3:44:8d:6d:53:80:79:e4:aa:3a:f2:1a:3d:5c:37:fd:3c:
fe:53:fd:7d:ff:17:1d:f5:a8:64:ba:f0:99:54:77:9d:56:85:
1e:f0:3d:b2:cf:bc:8c:6f:96:92:5b:be:f1:8f:0a:b3:54:dd:
62:83:bf:6c:99:03:2e:4f:d2:86:31:a5:c6:68:75:89:fd:8e:
b7:ac:35:d7:f5:d0:2e:1d:cb:09:ae:79:57:88:2d:c1:a8:93:
dc:24:76:65:4b:c8:bd:f0:72:f2:48:08:9e:08:3c:d2:a2:5e:
3d:42:6d:57:6d:66:59:b0:e7:f4:36:98:04:43:9e:7d:24:28:
d4:15:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:44:48 2025 by rpki-client