Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: +t9aVfopMitI/ipNfvR0UxfxtTq741O9cI8a11/jSpQ=
Subject key identifier: FF:A4:3C:07:09:8E:91:29:10:2E:E6:D9:03:28:E9:E0:33:F1:48:CD
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 0197771C8991ED571465BF0FAE18940C9A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 05:00:48 +0000
Manifest this update: Mon 16 Jun 2025 05:00:48 +0000
Manifest next update: Tue 17 Jun 2025 05:00:48 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: 8wLYT69CP7y7M7XVK1LoFWDuLFRGSdE+U5r7YAnSotI=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:89:91:ed:57:14:65:bf:0f:ae:18:94:0c:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jun 16 05:00:48 2025 GMT
Not After : Jun 17 05:00:48 2025 GMT
Subject: CN=ffa43c07098e9129102ee6d90328e9e033f148cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:f4:ff:6b:a4:b1:c1:95:a5:5b:17:e8:b5:
d9:9f:b0:71:e6:73:9c:af:a7:65:25:a2:7b:48:18:
80:e9:b5:56:67:e8:6d:a2:16:4e:ab:1e:43:61:af:
a6:0c:69:7c:ae:c4:af:be:7c:27:65:c6:e4:48:08:
f5:4a:2e:bc:87:cb:0c:b5:6a:57:22:cf:48:7d:ab:
29:09:7a:ed:3a:46:69:70:00:60:f2:3e:f4:02:b1:
08:e5:37:de:b2:e4:f9:97:92:4a:b6:3c:7c:4c:f4:
62:30:11:ca:36:47:63:5f:a0:3e:f6:1a:a4:39:8c:
0a:7b:17:e2:25:a8:8e:08:d8:07:d6:ef:ea:74:6d:
43:bd:07:0c:c2:08:d6:97:34:13:9a:98:dd:6c:f5:
a6:4d:af:1b:f3:de:4e:e0:6e:c4:3c:61:39:58:fc:
8d:d1:a4:9d:5c:b7:c4:3f:15:62:32:5a:b9:5a:bf:
88:03:dd:9a:e9:9f:c7:c3:08:78:2d:e8:4a:1c:67:
74:50:55:33:24:99:f3:59:10:6f:b6:df:0f:c2:19:
71:d3:54:3a:39:18:c7:f5:6d:7b:52:32:28:04:49:
9c:b2:da:5e:66:9e:97:2e:6b:42:44:b0:9f:52:7e:
4a:b5:9c:f7:8a:61:32:71:3f:74:bb:b3:4d:38:75:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:3C:07:09:8E:91:29:10:2E:E6:D9:03:28:E9:E0:33:F1:48:CD
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:38:cf:97:54:81:b5:ba:6c:3c:86:e0:25:8e:f7:17:89:22:
d0:62:38:db:a2:9a:8f:bb:ae:d6:50:e1:a6:6f:58:c5:27:4b:
db:66:96:e9:ce:41:e3:f5:28:35:e3:5e:5d:2f:a3:95:6a:8f:
04:fa:0f:95:fb:23:b8:32:2e:9c:8e:fe:b3:a6:c5:1c:9d:b0:
04:d9:a0:e6:58:81:ac:b0:b2:78:23:ce:53:1f:23:2e:43:04:
97:b0:43:30:ba:2e:22:9e:ee:3a:eb:eb:62:27:16:b0:40:aa:
9c:5c:a3:79:b7:1c:e5:80:d3:e5:26:24:1a:0b:3b:27:7e:36:
ef:a7:f4:28:ea:01:71:36:9d:b6:42:78:47:81:b3:d9:29:35:
e2:8a:4d:03:df:13:79:57:d1:e9:38:6a:58:e9:35:93:4d:1e:
9e:51:ce:be:d6:00:91:30:45:a6:ad:d2:c0:6d:4b:51:19:a1:
9f:4e:13:e5:6a:fb:08:ba:19:1e:a7:a5:0f:a4:3e:12:58:c5:
39:9d:dd:70:ba:45:3f:0b:d9:2a:f9:1c:d6:b1:a8:82:87:6d:
cf:2d:fc:99:47:cf:52:05:b3:eb:f6:7f:2f:6d:cd:bd:0e:83:
33:82:0b:66:1d:09:42:cc:80:75:8f:f2:8b:57:1f:f3:9e:5e:
85:dd:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:57 2025 by rpki-client