Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: u2hpaE/fO3cCibA2hUPz0apWg3FGKdq4UadkB3Fues0=
Subject key identifier: A9:92:E2:FF:A4:40:D6:BF:34:4F:F9:E1:AE:5E:5D:96:92:26:BB:A6
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019770AC2337DF370E0FAEB99640C2493438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 23:00:18 +0000
Manifest this update: Sat 14 Jun 2025 23:00:18 +0000
Manifest next update: Sun 15 Jun 2025 23:00:18 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: D3e9cqRkcdo+shWZx1DK5L7v+aF9lvSrVw9va+wNdT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:23:37:df:37:0e:0f:ae:b9:96:40:c2:49:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Jun 14 23:00:18 2025 GMT
Not After : Jun 15 23:00:18 2025 GMT
Subject: CN=a992e2ffa440d6bf344ff9e1ae5e5d969226bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:e2:d5:4a:db:22:bc:49:cc:46:d3:a9:5b:
ce:41:68:e7:5d:d3:97:2e:78:a7:ea:0f:27:6c:b5:
b3:e0:50:39:ea:47:3d:24:1c:93:fd:89:7c:eb:2a:
65:03:24:a0:89:0d:45:24:fc:c7:ec:28:f8:c2:4f:
cc:27:6a:8f:9c:83:d6:0e:e2:ee:56:1f:ba:62:fb:
8d:73:28:9b:21:70:23:5f:6d:09:f1:fc:4b:11:0c:
de:af:9a:ba:33:43:5c:aa:96:4d:45:c0:84:12:bc:
84:3c:3e:a1:cb:0f:3e:5f:b1:61:ff:56:b1:de:e0:
32:0a:bb:9b:9f:79:a7:00:f1:39:ae:ad:70:51:82:
53:89:ae:0a:3f:a6:a9:f8:01:51:fc:cd:fa:66:3f:
af:da:2c:bf:d3:31:da:78:cb:cc:f0:36:f2:d5:da:
ac:32:84:9d:24:f2:82:f0:69:c0:9f:ce:4a:a1:fd:
11:99:3f:26:61:6d:25:1e:79:66:85:1c:c5:39:bb:
f8:3b:2e:0b:e9:39:d3:68:2c:2a:40:74:01:f7:28:
a3:53:16:72:f9:ed:af:1a:bb:21:e7:87:8e:4d:ca:
bc:1a:37:12:90:7c:f3:d7:60:da:e7:49:7f:a9:ac:
50:c2:1d:c3:93:99:18:1e:90:9b:ae:c6:57:d8:58:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:E2:FF:A4:40:D6:BF:34:4F:F9:E1:AE:5E:5D:96:92:26:BB:A6
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:c2:cc:a8:42:21:e3:7e:6f:90:d4:82:86:2e:c5:1c:e0:
a3:9c:c3:66:25:9a:2c:e0:48:44:66:ec:73:af:c2:16:34:83:
fc:c7:b4:1b:8a:ea:71:47:ac:40:17:1c:19:f3:14:72:02:f4:
a0:d1:a3:92:61:90:8d:0a:30:f5:99:87:20:7d:c5:be:1e:9a:
a8:c3:b4:e7:99:41:8f:2b:b3:d2:5f:c5:d1:f8:03:23:27:32:
9b:4c:01:1a:d8:be:f3:c4:fb:f1:49:39:a4:bb:74:7e:87:c9:
62:1c:0d:82:f3:b8:5a:c6:dd:46:1a:88:1b:a1:a1:b2:bc:f6:
0d:23:f1:20:3b:66:99:bd:dd:35:6e:c0:88:12:be:03:5e:e9:
85:1e:af:df:2c:46:ee:16:fb:54:b6:a1:4a:b0:b0:1e:6d:64:
45:e6:7f:ee:bd:0e:c5:1a:5b:ec:43:77:d6:c6:b7:50:12:2e:
42:e9:1e:6c:ab:75:88:17:c3:23:8f:5b:d5:a5:20:16:2d:d3:
1d:1f:b1:88:f1:27:c5:73:d1:4d:9c:1f:33:66:45:73:bd:f6:
32:d9:b5:c0:1c:70:5d:ab:51:6e:4d:f5:55:26:c4:d9:f0:6e:
98:5a:eb:22:20:1b:bc:69:ff:fe:be:fa:a4:63:ea:96:9b:c8:
1e:24:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:07 2025 by rpki-client