Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: kk6WHLqb5gl2LafF314GjQ+o8GmHIDsTQorUOjt7d80=
Subject key identifier: 11:D6:95:54:8A:BE:99:29:3B:8F:5C:69:E2:E9:92:BD:61:DD:52:89
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 01976F9A5D365A868D26B34D51A4933E16F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 119B
Signing time: Sat 14 Jun 2025 18:01:16 +0000
Manifest this update: Sat 14 Jun 2025 18:01:16 +0000
Manifest next update: Sun 15 Jun 2025 18:01:16 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: XBD6XojLhDu72We9AmXbsmRoCq3op2/2gDIW+D4gUHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:5d:36:5a:86:8d:26:b3:4d:51:a4:93:3e:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Jun 14 18:01:16 2025 GMT
Not After : Jun 15 18:01:16 2025 GMT
Subject: CN=11d695548abe99293b8f5c69e2e992bd61dd5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:b3:c0:63:f2:7e:ab:61:56:ae:5a:69:66:
54:23:7c:6f:4e:08:38:9c:1d:2d:21:22:11:c5:7d:
b7:06:11:07:c3:e1:ca:33:0d:81:20:77:f8:04:81:
ca:67:92:cb:cb:12:b5:89:e5:b2:db:1a:8c:58:32:
f1:b6:63:2a:ab:af:43:b8:86:ec:76:d5:47:bc:8d:
15:6f:d5:c4:7e:03:c9:7e:75:f2:61:22:ab:83:e4:
f9:31:f7:94:c0:cc:c1:c6:f9:12:f7:f0:56:a2:c6:
7d:17:75:b3:74:0d:d9:c7:5e:11:af:18:20:f0:5c:
c6:a5:f1:96:61:b2:10:22:1f:9f:52:8f:c1:d1:c6:
2e:3e:5a:ef:89:4a:a0:45:18:e0:59:ef:52:70:5d:
df:c3:dc:68:0f:4b:05:9c:d3:d7:19:2f:1f:84:28:
e8:03:5c:fb:2d:5d:27:39:36:b3:bc:80:ec:06:af:
07:08:45:ce:0c:3d:7a:5e:67:f9:05:81:03:af:83:
03:4e:66:5b:5b:ce:6d:b4:b8:8d:37:08:c6:72:13:
eb:16:c0:0b:96:99:e8:21:5f:86:04:eb:b4:5a:7d:
60:7b:9a:d3:13:27:09:49:b9:27:33:51:aa:be:aa:
6d:64:f6:b1:78:4b:f4:47:68:76:3d:8e:16:81:a7:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:95:54:8A:BE:99:29:3B:8F:5C:69:E2:E9:92:BD:61:DD:52:89
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:62:98:f2:f6:ca:14:6c:6a:2c:f2:f5:e8:f1:6f:55:3f:61:
95:2c:cd:3d:2a:d8:91:23:81:20:72:a2:dc:36:0f:bc:68:f8:
24:52:03:02:ed:e9:16:30:a9:ec:d3:86:24:f1:d1:5b:a6:08:
af:9d:3a:c9:57:99:16:e9:e8:61:d6:e7:6f:f1:37:1d:53:0d:
63:2a:8f:04:18:a0:c2:72:e5:4f:54:1a:54:e7:69:06:7f:69:
48:10:1c:c9:65:51:08:ff:fe:58:40:cb:5c:fc:19:e1:82:5c:
de:cf:9a:44:6b:e9:24:6c:d7:e9:32:23:8d:21:be:e2:ee:bf:
23:a2:1b:43:dd:c5:18:44:f6:d3:2d:af:c0:9b:38:f7:c3:67:
4d:0a:d7:c2:20:aa:77:1d:55:4b:bc:db:00:41:24:1b:a0:da:
c1:47:22:86:77:b0:74:7e:a5:55:ec:76:e3:4b:35:25:65:f4:
50:aa:4f:dd:86:96:fe:89:d7:cb:0f:48:fa:33:dd:5f:c4:a4:
6f:66:b7:8a:be:cc:9e:12:e0:41:5b:9a:eb:bc:53:cf:d3:bf:
60:4b:51:a4:18:2b:87:67:8b:28:f6:8b:45:b9:6e:c3:52:e1:
87:bf:57:4e:d8:a7:c5:b0:11:75:28:9a:76:52:73:2c:d0:3a:
52:6a:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:57:38 2025 by rpki-client