Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: nbcSTrOBdXJVy2dHBGadFrpiXqkC0BJRsqhUeo6BAQY=
Subject key identifier: C3:F8:BF:D5:C9:1C:EE:FD:16:87:28:2B:DF:AA:D4:2B:30:73:AD:42
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019770AC7EF1BF4654FC6094A6CB7D570D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 23:00:42 +0000
Manifest this update: Sat 14 Jun 2025 23:00:42 +0000
Manifest next update: Sun 15 Jun 2025 23:00:42 +0000
Files and hashes: 1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=)
2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=)
3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: HVlg3KiybBmD1FEHvMBBdOECMG3h3VZ59vgL3dxp+Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:7e:f1:bf:46:54:fc:60:94:a6:cb:7d:57:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jun 14 23:00:42 2025 GMT
Not After : Jun 15 23:00:42 2025 GMT
Subject: CN=c3f8bfd5c91ceefd1687282bdfaad42b3073ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:d9:f4:7e:82:d4:d0:58:1c:06:3d:2b:73:
42:84:9d:15:11:b0:2a:e2:d0:ad:8f:3b:6f:36:cd:
ec:cd:68:68:39:27:44:51:47:a1:e3:43:e8:f0:43:
5e:98:0c:e1:e0:71:89:fa:83:d7:96:29:92:2b:1a:
70:70:f5:9a:db:be:79:4f:e4:88:72:d7:3f:d6:62:
be:6b:07:88:66:fb:ff:a9:ed:71:b1:14:f6:b3:05:
a7:f9:d3:8c:b4:65:43:46:b0:d4:29:8a:15:af:2d:
89:eb:53:1c:19:ea:e5:e2:5f:11:af:22:a1:f6:f6:
40:2b:ab:4c:a8:82:51:74:a5:5d:6e:bb:5a:15:4b:
b8:79:1f:47:46:15:80:9c:bc:d7:16:27:a7:c7:60:
da:c2:cb:11:ae:27:29:f3:83:84:d1:e5:ab:0e:67:
58:c0:5d:3a:c7:6a:bb:37:77:39:64:87:f6:15:2f:
fe:14:9a:8b:21:7e:2c:d7:7d:23:a2:ca:3b:e2:d7:
0b:ed:0b:2b:ad:40:f9:b4:a1:1a:02:12:4f:e0:fa:
39:ee:b8:f8:3f:c2:d0:57:33:af:e4:d2:87:0c:dd:
64:11:c4:01:4d:eb:28:73:b1:a4:eb:ae:20:2a:ad:
9d:a3:b0:77:73:1e:b5:b3:95:8f:55:d0:52:a9:47:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:BF:D5:C9:1C:EE:FD:16:87:28:2B:DF:AA:D4:2B:30:73:AD:42
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:79:6b:59:72:2c:5a:51:82:8b:fe:33:f3:85:24:5c:c7:
66:03:d7:8d:a9:03:0f:51:6c:5b:a5:36:dc:2d:64:f0:0c:38:
78:7a:20:c7:44:81:81:b4:dc:5b:0f:55:12:1f:4a:49:7c:5c:
10:0b:42:bc:ac:2d:bf:1b:a4:fe:30:a3:14:bc:e7:4a:09:cd:
eb:95:1c:5d:85:e7:af:6f:0b:0a:a1:14:fd:9f:5c:7f:9a:87:
cb:47:7e:55:f1:ba:aa:dd:5a:01:8c:2f:83:3e:04:e3:a4:c9:
5d:1b:9a:12:7f:9e:ec:ec:73:d6:76:5a:71:35:b3:03:46:bb:
94:c5:12:38:51:e7:75:d7:79:c0:bc:1d:5a:49:4a:3c:3d:83:
57:8f:d9:13:3f:e2:70:2a:29:29:2c:77:60:25:12:61:b8:d8:
32:72:52:2e:55:08:44:09:2e:07:39:69:d9:fa:aa:e4:b0:97:
e1:a0:6b:4d:b3:9e:ce:f1:5c:ec:c0:c3:09:53:a4:b5:17:a2:
b7:ae:c1:09:70:de:b1:a1:30:b2:30:60:ab:d7:c7:cd:8d:d3:
b9:4f:fc:00:25:54:b4:73:0f:6c:ce:d9:81:ec:59:e5:e1:42:
b5:28:32:5c:52:18:d7:58:3a:8c:7b:e6:fd:19:dd:51:7e:4b:
d6:ac:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:27 2025 by rpki-client