
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: iK3KxbPXtFHxyYS8Bjg+2isOcS8QbcsjyfTRkffKS3A=
Subject key identifier: A4:14:DF:2E:9D:B6:36:57:93:67:AC:89:7C:B8:B8:40:AF:10:41:40
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019769CF24DB56C59FE59E4B514057EC6932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 159A
Signing time: Fri 13 Jun 2025 15:01:12 +0000
Manifest this update: Fri 13 Jun 2025 15:01:12 +0000
Manifest next update: Sat 14 Jun 2025 15:01:12 +0000
Files and hashes: 1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: wtw/GX7h1D/5x/nGAggmKJj/6Gegnt7HOOnd3Pfisxc=)
7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:24:db:56:c5:9f:e5:9e:4b:51:40:57:ec:69:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jun 13 15:01:12 2025 GMT
Not After : Jun 14 15:01:12 2025 GMT
Subject: CN=a414df2e9db636579367ac897cb8b840af104140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:8e:b0:71:2b:bc:84:e9:72:1c:c0:bf:a6:
a6:72:eb:0c:cd:30:82:dd:5c:14:31:f5:6d:c2:9a:
be:f9:57:5b:a1:e3:7b:cc:81:fe:5a:66:c1:69:1c:
ce:9e:1f:b4:0e:92:4f:64:76:81:b1:5c:23:79:79:
a5:17:90:0a:0f:e7:4e:85:55:80:ec:25:76:da:a4:
40:1e:da:05:c2:d0:7d:0c:ba:e1:d1:ab:bd:5b:64:
a3:0a:06:2c:8f:38:1a:ed:cf:44:da:84:d7:0f:f5:
d2:31:53:60:b7:91:83:a7:3e:65:81:80:c8:0d:14:
c9:bb:eb:b3:b1:76:59:87:72:2b:e1:68:49:35:21:
69:9d:bf:14:b9:fd:f5:c7:f4:aa:f7:65:f3:03:ed:
65:25:42:85:40:bc:e4:1f:a3:56:0c:c4:0a:b3:fb:
65:24:39:45:8b:01:cc:2c:0d:89:f9:37:61:25:5a:
d2:50:9a:3f:71:de:c7:39:cb:82:a9:e4:62:bf:c6:
82:65:f8:7c:d7:dc:69:95:7d:87:66:d9:f8:fd:bb:
cb:f1:79:f5:e8:3f:17:82:98:3e:9b:ea:bc:5c:74:
51:e7:46:df:e9:9d:25:fc:35:eb:2c:d8:5d:68:bc:
c2:e7:91:a9:5f:4f:46:46:a8:9f:66:c9:0d:59:b9:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:DF:2E:9D:B6:36:57:93:67:AC:89:7C:B8:B8:40:AF:10:41:40
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:65:31:92:0b:b6:f1:f5:69:97:81:d3:0d:b6:91:2f:b9:
df:05:0d:8b:3a:35:a7:94:1d:94:6e:bb:82:1b:3d:d4:69:40:
93:5f:e7:cb:f1:08:a3:c7:e9:69:75:d2:9d:3b:b8:97:8d:63:
a9:ef:24:87:82:89:86:af:ef:ee:08:75:de:8c:8a:e3:3e:a7:
41:53:8a:68:2f:92:9d:19:54:7e:b2:e7:e7:81:60:0b:90:d6:
90:44:b1:a5:19:a0:97:9b:80:a7:86:80:12:7a:19:e3:24:e9:
8d:1d:65:0a:8c:d5:51:75:97:0f:ba:7d:1a:eb:9d:e7:ef:ba:
eb:f2:eb:d4:b2:a1:d6:4c:e9:81:a3:88:1f:06:db:e2:c9:ce:
bf:9f:a1:3c:59:7c:e3:f0:5f:fb:15:2a:20:b7:92:be:6b:37:
7f:95:8f:fd:fe:a0:3a:ae:db:8f:0a:f0:01:2d:b5:41:c4:66:
c3:ce:e2:cb:ee:29:b5:fc:98:3b:23:64:bc:d4:68:a7:6a:77:
9d:c2:85:98:ea:8d:94:e2:71:48:e5:c7:33:1e:d4:20:76:35:
cf:68:e2:2f:e6:23:50:0d:65:89:d6:a0:0b:4c:d9:cf:47:90:
d3:df:ce:c7:46:9b:92:8b:7f:4f:64:5d:b9:c0:0a:ce:7b:dc:
a7:42:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:40 2025 by rpki-client