Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: tOTeEHMR9XamO0ggFnE/g8nAbSrTBRk6nvkvNPMtZKU=
Subject key identifier: 8C:20:69:5E:48:88:78:B7:CE:5D:C3:61:E9:63:6E:AE:F8:63:AE:C1
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01976A3C6A9049E0CF231FA71478099FE694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1148
Signing time: Fri 13 Jun 2025 17:00:33 +0000
Manifest this update: Fri 13 Jun 2025 17:00:33 +0000
Manifest next update: Sat 14 Jun 2025 17:00:33 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: 48ILsOp4fq3ijdJIPny7all1+iRecUp3lArIRP2lQck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:6a:90:49:e0:cf:23:1f:a7:14:78:09:9f:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jun 13 17:00:33 2025 GMT
Not After : Jun 14 17:00:33 2025 GMT
Subject: CN=8c20695e488878b7ce5dc361e9636eaef863aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:19:a4:43:c3:23:e1:cd:7f:5d:77:57:14:
5a:06:cd:e1:36:1a:6a:ed:5a:7d:48:03:e7:05:29:
a3:05:a9:4d:ee:70:97:9e:45:43:66:a9:7d:bd:28:
9b:9d:9e:de:e8:95:a6:50:b5:f7:c6:ff:80:94:cd:
6e:bb:94:62:96:b7:b8:fa:4c:6a:3d:a4:64:6b:16:
45:c6:f0:3a:5c:89:20:38:b7:3b:03:4c:e7:2d:c1:
93:4e:d0:89:1c:d9:89:ed:b7:56:9d:5f:c5:75:d2:
58:a0:b8:cc:4e:c3:15:03:e7:24:c9:46:8a:df:1f:
46:e1:37:b7:07:25:9f:f1:35:13:e3:af:19:15:4b:
39:f7:b6:4c:cd:74:06:3b:64:72:36:bf:46:81:8f:
ce:3b:0f:2f:2d:cf:5e:90:cc:91:1c:c2:a6:e7:89:
db:2a:c6:62:d6:6d:dc:d0:43:15:6a:71:33:86:54:
5a:83:a6:db:7b:09:ac:fd:da:e9:44:e6:27:f0:d3:
ce:01:be:ca:6d:27:41:df:58:c2:da:5a:18:20:97:
54:4d:16:c1:44:9b:39:e5:c0:76:83:b1:6b:9a:eb:
f1:0c:54:b9:5e:18:a8:8e:5f:9d:29:44:16:ac:ab:
c5:15:8c:4c:ec:bf:e5:39:c4:ac:02:7a:da:7b:56:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:69:5E:48:88:78:B7:CE:5D:C3:61:E9:63:6E:AE:F8:63:AE:C1
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a3:85:80:b7:71:5f:17:87:3d:6d:8a:97:30:76:11:c4:e7:
58:ee:df:ac:d4:f5:fb:47:f8:98:cd:62:2e:c0:07:5a:38:21:
95:b9:4a:05:85:79:b4:21:67:c1:6e:89:3e:c3:96:17:4c:c7:
9d:c2:a6:fb:d3:a1:c5:e1:db:f1:77:81:65:08:b9:a1:5c:76:
19:bf:f6:a1:d9:44:83:78:da:75:a4:85:19:13:2e:6e:f4:26:
99:de:0e:bf:c8:cc:96:78:0a:25:67:19:05:f1:7b:65:fc:57:
29:65:0a:c4:f7:05:e8:20:f5:66:b1:22:dd:73:9a:85:f5:0a:
5a:8e:67:4b:6d:c2:f4:81:35:a9:c0:0c:2b:ea:47:94:03:52:
3f:d9:5c:29:5d:ac:66:ad:cd:54:2d:40:c7:e1:44:64:5e:68:
ea:62:b9:c7:d6:1b:84:ea:ee:1b:28:3e:10:fe:1e:7c:2f:fb:
a9:05:0f:94:f0:fd:e4:5b:d6:a5:48:45:ab:7f:26:fa:58:6e:
9e:ff:01:64:3c:a5:a7:36:90:19:d7:a8:6f:1a:86:bd:9d:26:
51:04:d5:84:8b:83:65:a5:9d:2a:fb:45:84:6f:c1:5a:0b:b2:
cb:79:5a:ab:32:98:be:fd:8c:32:0c:5e:80:af:7c:46:a4:ab:
37:f0:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:28 2025 by rpki-client