Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: dwU/W4+VlecmLGPn6R0q2uzEQy6fiakla2GlEdK14m0=
Subject key identifier: 27:9A:DD:AE:8C:61:D5:C7:2A:3D:97:71:37:D7:64:68:38:13:3E:40
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 019771F5E6D2AD8F23A0AAF857A12C6050BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 0671
Signing time: Sun 15 Jun 2025 05:00:30 +0000
Manifest this update: Sun 15 Jun 2025 05:00:30 +0000
Manifest next update: Mon 16 Jun 2025 05:00:30 +0000
Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=)
2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: P3rI3dE4x5T6eW4IIAiZVUvLhRx+w2x2svVl1O7O1bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:e6:d2:ad:8f:23:a0:aa:f8:57:a1:2c:60:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Jun 15 05:00:30 2025 GMT
Not After : Jun 16 05:00:30 2025 GMT
Subject: CN=279addae8c61d5c72a3d977137d7646838133e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:fa:b4:d8:00:ef:6b:17:bd:6d:89:7d:b2:
f9:94:44:b5:a8:ea:cb:7c:f8:f3:e5:17:0a:c2:d6:
32:4b:52:25:f0:15:53:4f:23:b7:c3:b4:fa:27:26:
62:03:a2:d9:d3:a7:63:bc:ba:5c:23:8f:de:db:35:
00:d0:2d:c2:8b:d6:16:dd:4d:50:76:e5:d6:79:cf:
e1:29:e9:17:f3:72:be:0b:c4:4b:20:52:13:e8:36:
f9:e1:b6:50:9f:22:ca:0f:2e:13:36:7d:41:d2:f5:
db:b7:6a:77:95:5a:f5:a7:69:0c:ef:95:8f:4e:26:
30:5a:25:5f:fa:be:b5:e7:6e:c0:22:8a:f1:e8:d3:
06:22:42:15:ad:b5:83:20:da:20:df:ad:b0:eb:d7:
ac:10:6f:da:a2:35:07:d6:20:71:2b:68:9a:90:4f:
6d:9f:79:8c:24:93:bd:ce:ee:b0:ce:8a:51:75:33:
77:24:70:55:21:21:d5:db:d6:86:f6:3d:28:0c:a0:
7d:e0:02:88:6b:35:d9:3e:97:aa:84:eb:85:66:b0:
c9:3a:e7:3d:23:7a:0e:ba:38:d7:75:db:41:51:25:
3d:f5:e7:6b:93:04:b1:a0:f5:41:e5:0b:e0:f5:a5:
8c:c0:41:d8:25:4b:97:84:9e:f9:5b:d8:b8:0e:0a:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:DD:AE:8C:61:D5:C7:2A:3D:97:71:37:D7:64:68:38:13:3E:40
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:21:e7:fb:98:25:51:56:8f:65:77:8a:c4:55:e8:f0:d1:
d1:f4:27:be:1e:1d:dd:48:12:25:20:56:2c:fd:97:db:43:18:
8e:c4:45:f1:8e:fc:3b:8e:21:08:b6:e9:8e:c8:6f:b7:25:33:
fb:6d:32:aa:30:ec:3e:46:98:44:f6:37:78:14:43:40:cd:7b:
d0:02:1e:05:16:7f:8b:9d:02:cc:dc:77:ec:50:31:13:22:21:
88:1f:cd:7c:d2:6f:07:b9:1a:25:fe:58:63:9b:91:fb:53:5f:
1c:f4:3d:16:2e:59:e7:fa:2d:86:c5:32:be:74:a6:47:32:5a:
ee:70:d7:31:08:82:59:17:ac:a1:17:5a:9b:a6:b4:d8:d3:7e:
cc:dd:c1:b0:57:60:c0:b0:a2:28:30:04:b3:4a:98:79:97:1b:
2e:43:f9:36:3e:db:71:86:9c:8b:30:8c:51:f9:05:8a:9d:e8:
c4:1d:33:a9:0f:94:56:2a:42:32:24:b9:ae:14:84:b4:e7:07:
65:cb:87:6f:8d:4c:d0:e0:f5:2d:d3:8c:a9:2f:f9:05:39:97:
de:67:bb:d6:e6:44:bc:c2:a8:6d:d0:53:d5:b9:a0:24:60:85:
cf:b7:ed:fe:bb:93:61:9e:3c:89:4f:a4:ce:63:9f:aa:4d:d6:
67:14:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:22 2025 by rpki-client