Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: f5xeMEGX/NRZsMoQzZSOfLNAgITTUMgO3ulbDDolc3M=
Subject key identifier: BE:6C:D7:35:9E:12:BF:37:3A:AF:F3:06:12:2E:4B:12:AB:2C:44:F8
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 019769CEEF1A61A2A5407189892B10DF46CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: 3hqvC+1VlTSqgkTZNQqES+67v42H/FDtQnCDTJ3VNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ef:1a:61:a2:a5:40:71:89:89:2b:10:df:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=be6cd7359e12bf373aaff306122e4b12ab2c44f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:0a:67:1a:26:8b:4b:68:f6:55:eb:dd:7a:
2a:80:53:50:04:56:d2:c8:48:6d:19:f0:74:78:48:
50:61:2f:9f:fe:c8:d8:46:a4:60:9f:7f:6e:fd:88:
7d:d7:f9:be:9c:08:df:93:0f:bc:67:78:b0:f2:72:
ac:4b:25:ba:43:7d:51:d1:e7:5e:d7:17:6b:b6:e6:
3b:60:27:0d:30:db:58:d4:94:65:bf:fa:06:b5:83:
57:72:50:97:27:3a:59:0d:dc:03:2e:1b:1a:ae:ec:
6a:5d:13:38:b9:c3:df:62:e0:fd:f5:6d:3c:cf:2a:
06:12:80:9f:75:12:66:c2:8a:5c:65:7d:43:ea:51:
c4:28:94:15:89:01:56:68:03:a3:fb:37:f1:2d:dd:
26:38:03:52:89:88:66:7e:91:2a:dc:22:78:5f:0f:
2d:c4:bd:62:22:4b:90:d5:d5:75:6d:89:fe:bf:9c:
c6:e5:09:fc:06:1f:c3:39:fe:ce:f4:7e:ad:3f:b9:
b6:cf:72:6b:6a:4c:47:e9:9c:d7:67:51:2b:36:9c:
7e:23:ff:de:a6:9f:f4:5f:d5:e4:97:35:74:86:1f:
00:d1:48:e3:d4:93:a5:ca:86:90:79:50:48:65:14:
2b:3c:74:d8:17:52:b1:c0:6f:ff:2a:07:d9:31:ad:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:D7:35:9E:12:BF:37:3A:AF:F3:06:12:2E:4B:12:AB:2C:44:F8
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:83:6d:36:5a:17:76:ea:0a:3b:5a:d6:57:31:c0:85:6f:
82:64:fb:83:27:6c:8c:6e:d9:cb:55:3f:1b:ce:60:89:a3:db:
20:93:4d:72:93:75:06:53:a0:ee:56:08:e1:80:b3:08:46:5c:
a2:16:fc:cd:57:e3:8a:53:a0:83:24:42:6b:4d:c2:50:b3:f7:
5f:39:be:da:f7:74:f4:0a:b1:7a:8b:67:62:4f:da:be:a8:aa:
88:bc:1d:59:2c:53:94:4a:1b:ee:99:69:f0:d0:49:3c:79:35:
e5:95:fd:15:b7:bf:f1:49:94:33:14:78:02:97:ac:88:d1:c3:
de:41:ba:22:4b:cc:46:4c:8e:8c:c1:03:bb:ad:bd:47:cb:65:
90:ab:8a:fe:35:25:96:5f:54:29:97:67:a8:a6:49:c8:cc:24:
8d:82:e7:c9:5f:22:40:3d:af:b3:57:18:ea:fe:bc:bb:cc:13:
a6:d1:cf:31:16:55:e8:c5:c8:1a:7f:39:b8:73:ec:20:13:36:
e5:60:4a:dc:f3:a7:54:49:8c:93:67:45:45:7e:e6:0c:4f:30:
8e:a7:ef:50:62:cd:02:3e:3e:75:f5:2a:13:a9:42:3f:2f:05:
92:2a:b7:72:a5:10:95:e4:43:8c:8d:73:66:75:cb:45:37:91:
35:42:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:27 2025 by rpki-client