Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: evMDphvnl8UFKrWYASv79snKnlwzO5ZzK99PBONtqdM=
Subject key identifier: 32:58:A8:5F:66:4F:0A:F3:07:48:A8:91:B6:CD:97:52:41:0B:D1:2D
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01976A06005C3E2E42E5701ED85A625978C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 16:01:07 +0000
Manifest this update: Fri 13 Jun 2025 16:01:07 +0000
Manifest next update: Sat 14 Jun 2025 16:01:07 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: x7aeSbM8ovK0GZeL3FxFLQlbb+/O1w+H4nei1ilC1B8=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:00:5c:3e:2e:42:e5:70:1e:d8:5a:62:59:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jun 13 16:01:07 2025 GMT
Not After : Jun 14 16:01:07 2025 GMT
Subject: CN=3258a85f664f0af30748a891b6cd9752410bd12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:88:0a:b0:ab:23:c5:f1:0e:a9:62:a9:b9:
cf:ae:b7:bd:f6:f0:8c:e9:4e:32:76:3f:a6:72:38:
36:67:17:36:27:a8:32:33:8e:97:1c:d0:be:d4:2a:
60:08:19:86:45:8f:06:1d:63:d4:9f:89:24:2d:80:
e0:9f:91:88:d0:2a:6a:bf:17:38:e1:70:de:3f:a6:
7f:5f:b6:b8:a7:6f:b8:ae:c5:53:64:04:a8:46:76:
a5:61:9c:b8:82:40:c4:8c:51:ce:9d:ed:70:c4:48:
14:0e:e4:23:68:08:0d:60:10:d8:4e:55:8f:00:df:
1f:66:5f:d7:8a:d3:e3:b3:28:d2:fd:85:30:93:a9:
76:cd:51:39:35:37:eb:a3:eb:19:36:27:be:2d:86:
d3:f4:e9:2a:56:57:d5:8b:3b:09:b3:c8:30:11:b0:
76:47:36:5e:3e:d6:39:35:14:a6:4a:b3:86:37:4c:
18:7e:10:c5:dd:9d:2b:ea:fc:99:2e:63:14:e9:fd:
fd:15:54:ee:e0:00:45:8f:2a:6f:3f:1d:a9:af:c9:
30:2d:b7:5d:97:66:ec:ec:4c:ac:19:93:d0:c9:29:
5d:98:1b:81:5a:0b:3b:a4:90:97:08:5f:40:5e:f6:
f7:16:1d:80:69:b5:55:f1:7d:ab:32:4a:1a:58:65:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:A8:5F:66:4F:0A:F3:07:48:A8:91:B6:CD:97:52:41:0B:D1:2D
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:26:2e:a6:c5:19:dd:49:79:b9:40:fc:99:c0:83:02:bc:
3f:97:fb:a4:21:bd:ca:d3:e9:c2:2b:1e:73:c1:80:5e:55:67:
e2:8c:f4:75:44:c2:3a:33:a1:04:60:20:30:94:bb:87:32:85:
3e:07:70:a4:d0:94:92:f4:32:4f:e9:0b:26:80:8d:d3:3f:4e:
64:44:b3:a9:c2:d6:e3:06:1d:cf:11:41:bd:ef:d8:ed:c9:20:
14:43:3c:d9:46:02:12:f8:76:95:e3:f2:b0:25:84:7e:5e:ba:
af:f3:d1:ce:5f:26:c6:52:05:1e:29:8b:bf:11:9d:a5:3e:05:
91:13:1b:92:f7:03:49:97:f9:7a:ed:de:f7:1f:d7:ea:01:3c:
cc:a3:63:ae:80:6b:65:a4:6b:5b:64:5f:c6:06:67:cf:fe:93:
46:02:3d:9c:4e:9c:e0:5d:44:a8:b4:a2:e2:e7:9a:28:ed:4a:
35:1a:2b:75:d7:38:ce:e3:b4:cb:17:51:7e:f3:11:8c:a1:d7:
a9:1e:3b:12:b4:27:ab:5f:c6:0e:43:16:d1:d5:f6:17:d7:ab:
0c:fb:de:fd:58:42:87:49:70:c0:3d:be:22:17:87:7e:69:ce:
5a:fc:d5:39:fe:93:55:10:4e:e6:58:18:a3:5c:30:7c:cc:5b:
b0:bd:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:29 2025 by rpki-client