Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: oMMqGPzm+k09jhr/lwT9vpneRgVRwq0d3p1ECwb0ly0=
Subject key identifier: 76:AB:EB:4D:70:64:09:B5:DA:CC:E5:6F:A4:CB:F1:F4:E0:D6:22:C7
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 01976DAB3D6AEB2D9D191E9334922C75B710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 1061
Signing time: Sat 14 Jun 2025 09:00:28 +0000
Manifest this update: Sat 14 Jun 2025 09:00:28 +0000
Manifest next update: Sun 15 Jun 2025 09:00:28 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 8YAiKOX5nyd2F5no7TetlcoGkBSbUgsAZ2xu8thE/9c=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:3d:6a:eb:2d:9d:19:1e:93:34:92:2c:75:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jun 14 09:00:28 2025 GMT
Not After : Jun 15 09:00:28 2025 GMT
Subject: CN=76abeb4d706409b5dacce56fa4cbf1f4e0d622c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:b5:85:a4:c4:0b:58:4e:13:e0:a5:24:e2:
45:d3:06:6f:36:c9:a1:40:6c:d5:1e:e9:b7:53:71:
f5:8c:c0:c8:ac:de:7e:96:b0:62:04:0a:31:05:b5:
f6:f8:21:a7:81:76:76:66:c7:42:f4:ce:b1:53:7e:
33:07:d5:d4:d9:96:4d:43:bd:04:71:69:c6:f8:d5:
d5:0c:f6:35:ad:6d:bb:9d:91:41:d6:53:55:34:eb:
4f:79:6f:2a:c6:f5:0d:ac:bb:18:16:2e:06:c4:9a:
30:f6:53:5b:d6:85:72:66:40:0f:be:24:cc:5b:45:
71:7e:8d:31:d4:69:db:e3:c4:25:96:39:49:f2:38:
ae:f6:c4:a7:3a:8e:8e:48:bf:eb:08:b7:fd:60:78:
61:1d:5f:62:18:97:77:24:8d:c8:83:09:f8:86:ba:
ff:4d:a0:5d:db:79:ef:2a:dd:f6:56:d7:31:aa:10:
f7:ca:c1:59:5e:90:d6:3b:fc:5a:b7:84:c5:1a:5c:
be:5e:43:2b:3a:25:a7:e1:05:53:a2:88:10:27:66:
36:bd:dd:aa:4d:b5:76:3d:ed:61:5e:ba:41:1e:9f:
6e:ac:6b:39:b0:c6:72:1f:29:86:bc:00:40:db:ea:
b8:b0:f6:41:55:08:4d:4c:e0:7f:37:7e:a7:64:33:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:EB:4D:70:64:09:B5:DA:CC:E5:6F:A4:CB:F1:F4:E0:D6:22:C7
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9a:58:51:ae:a2:eb:01:37:e3:af:26:cd:c6:66:4d:ed:4d:
34:f9:14:a3:d7:ad:03:5a:4e:4d:dc:42:98:0d:a1:eb:f4:f4:
89:0e:b0:6c:b9:4c:22:2e:3b:f9:8a:37:4c:b0:04:c1:54:d8:
f1:f0:e2:5e:51:8c:46:f2:e2:18:3c:4c:c9:c1:83:c5:9d:72:
17:03:c1:69:e5:a2:be:a3:00:3a:ad:0a:9e:b3:23:de:b6:11:
f7:d5:d9:d4:87:01:3c:a0:13:fc:1f:35:a4:1f:03:fe:ef:20:
10:46:3f:fd:86:e9:a5:24:c3:68:a1:97:da:ed:79:6d:5e:cf:
b0:9b:ca:f7:48:d4:5e:09:8f:28:39:ab:c1:49:37:79:08:9f:
88:76:d2:29:82:d6:24:a2:fa:f3:58:19:40:f7:bf:ac:4b:28:
d5:9d:d0:34:29:85:c4:85:ae:1a:25:13:4e:73:e6:b3:73:fd:
a5:6f:10:3c:c2:b8:b8:e4:02:56:e1:b9:97:94:48:f3:c0:63:
b3:40:18:6a:9e:3a:54:25:65:9d:bb:0a:43:22:83:94:77:de:
96:b3:84:1a:c7:2f:f7:7d:16:0c:fc:67:b0:e6:ed:28:79:15:
5e:a7:7e:50:63:20:e2:85:06:a5:12:41:8e:c8:88:5f:77:1c:
9e:2b:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:53 2025 by rpki-client