Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: VlGJF5lZyJfx0mx8TGIv3aKyctfSovNS4IbzfJdMCds=
Subject key identifier: 3A:6B:08:8F:17:9F:A7:88:86:6A:00:24:5B:4A:2F:49:6B:5E:7C:83
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 01989D4BA535DCFE494E6900BC97DA00E33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 070C
Signing time: Tue 12 Aug 2025 08:00:37 +0000
Manifest this update: Tue 12 Aug 2025 08:00:37 +0000
Manifest next update: Wed 13 Aug 2025 08:00:37 +0000
Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=)
2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: 86rOYuVojVEaQjj/SCyO0nkaPnJHHaStbRFgnNavffE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4b:a5:35:dc:fe:49:4e:69:00:bc:97:da:00:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Aug 12 08:00:37 2025 GMT
Not After : Aug 13 08:00:37 2025 GMT
Subject: CN=3a6b088f179fa788866a00245b4a2f496b5e7c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:85:65:dd:96:a9:58:00:cc:c6:f1:79:86:
e4:ce:de:52:2c:76:0c:22:89:7e:df:dd:fb:3b:61:
ab:f0:4b:f6:10:ad:03:4e:7c:6c:16:8a:92:e2:f2:
39:ea:b5:17:bc:31:1a:a1:c2:e2:ee:15:7b:79:8e:
f2:52:b5:a3:98:5b:0b:e2:41:a8:48:64:3a:5e:b5:
f2:e0:7e:c7:23:77:c0:93:7c:de:5c:aa:94:f8:0b:
f9:1f:05:b8:69:2e:27:fc:cf:e1:3c:27:54:7d:b7:
eb:df:a4:ef:55:d0:28:ec:10:a9:bf:4a:e4:48:fa:
c6:ce:ad:c1:c0:e9:47:dd:ec:64:f9:cc:77:6f:46:
d0:c6:8a:df:e4:b5:16:36:b8:39:ef:96:d4:78:9a:
57:04:cc:ca:67:dd:b3:c6:24:fb:19:d7:07:d4:8d:
d8:56:42:fc:7e:01:33:90:d5:a2:41:a5:24:a7:d7:
76:e8:28:2d:ec:96:d7:9a:70:36:d5:d7:fa:94:c3:
1e:54:ba:38:e4:7a:8f:d4:c4:6f:55:73:41:67:fb:
a7:bb:d1:65:c5:32:4f:11:fd:53:79:5b:1c:c7:2f:
54:da:c8:e0:25:6b:0c:69:32:02:78:d6:27:f6:4d:
e2:f4:0a:4d:98:0f:14:58:8d:b7:dd:3b:fe:d4:ff:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:08:8F:17:9F:A7:88:86:6A:00:24:5B:4A:2F:49:6B:5E:7C:83
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:bd:d9:9f:89:11:fc:7b:51:83:da:f9:b6:31:56:d7:4c:
7e:27:d2:fe:a8:5a:ab:e7:75:27:3a:2b:3d:fc:43:76:8a:1e:
f4:83:a5:d5:ca:6d:66:e2:ed:25:81:5b:56:7d:24:03:53:f4:
4a:d1:7c:3b:a0:61:28:49:ff:89:9e:4c:46:ea:fa:77:50:0d:
4d:e5:11:53:53:19:97:65:69:a7:f2:d7:9b:00:f3:94:ad:77:
4b:5f:ca:26:aa:8b:6f:66:b2:03:e0:92:25:fc:26:d6:23:82:
32:8f:39:b1:51:12:f2:a3:cc:d0:fc:9b:26:99:74:12:aa:ff:
1c:82:1e:30:a9:00:4a:76:ed:0a:d5:fc:ab:cd:ba:72:51:0e:
fc:48:32:50:0a:18:cd:54:b2:5c:ee:2e:8e:b3:5f:73:7d:6f:
4a:b9:4e:43:f1:44:23:fd:b1:e0:74:be:99:e1:27:84:76:35:
90:2d:d0:b5:46:48:b1:c7:a7:9f:cf:6f:3d:d6:06:1a:8f:01:
d2:f3:55:0e:d0:a2:d1:8e:f5:2c:4d:ac:ef:04:0f:03:4c:0b:
5d:6f:61:ff:8f:3a:03:86:f2:20:36:82:93:e1:d7:7e:25:6f:
12:18:0e:6e:64:03:93:1d:d8:fa:14:ff:6d:17:55:60:c3:f5:
60:d7:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:39 2025 by rpki-client