Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: 6UECHD8TM1Bj1N4wZLzR2BYzhSyBxz/8jNDZijP641M=
Subject key identifier: 5D:74:BB:2F:B7:EB:A8:D7:B0:A7:DD:B9:85:8A:D0:26:55:46:4F:FD
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01976929D899F84890C17F1161B016547FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 12:00:39 +0000
Manifest this update: Fri 13 Jun 2025 12:00:39 +0000
Manifest next update: Sat 14 Jun 2025 12:00:39 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: Tvy13YwupXGZCZXD9xW8TM9Int8NSOp4Mvh63J6cnX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d8:99:f8:48:90:c1:7f:11:61:b0:16:54:7f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jun 13 12:00:39 2025 GMT
Not After : Jun 14 12:00:39 2025 GMT
Subject: CN=5d74bb2fb7eba8d7b0a7ddb9858ad02655464ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:ae:d1:96:54:09:0d:16:7c:0d:d9:9c:df:
c9:7e:ec:e3:05:94:41:4b:8e:39:35:4e:1b:4a:71:
91:b7:88:57:b2:8e:d1:cf:cc:30:e7:3c:55:df:0b:
58:37:29:57:65:92:ef:5f:da:90:c5:ee:e4:69:8c:
00:65:07:20:ea:b3:e6:84:5d:fc:73:dd:a5:af:8b:
ed:5e:24:7c:41:31:09:cf:a6:64:86:8f:1b:d9:85:
0d:90:b9:25:28:eb:4c:bb:85:23:6b:ae:7d:aa:e0:
ff:cb:63:b9:d9:05:22:54:d1:71:76:93:3a:22:7d:
fd:0c:6d:d4:ff:44:c0:4e:ba:15:43:ce:07:a9:72:
9c:4b:55:91:d3:83:f2:5e:c6:31:5c:56:43:9a:d3:
ae:3e:58:46:d0:e8:6d:6e:ab:b8:24:9e:6c:e6:69:
c9:6f:6e:d5:76:3f:52:1f:84:c4:83:53:5f:73:1f:
58:63:a5:22:44:24:10:d9:4f:f0:ba:fd:7b:6e:c2:
1e:20:89:b7:62:a5:f1:c4:b6:80:a5:74:33:b1:e2:
62:d8:c9:e3:6b:1c:b2:c8:64:6f:0d:74:99:fe:2e:
9d:48:1f:0d:9a:07:b6:fd:37:11:ee:90:1f:58:61:
21:99:91:8f:e0:94:df:23:70:57:f7:18:4b:c3:62:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:BB:2F:B7:EB:A8:D7:B0:A7:DD:B9:85:8A:D0:26:55:46:4F:FD
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:65:36:ab:82:b9:31:5b:a7:f6:89:05:44:1e:2f:b3:48:4c:
59:4b:c0:56:30:be:83:af:31:57:d6:78:58:d3:2f:bb:8e:61:
6d:98:b5:9b:52:89:99:44:0c:25:f1:27:09:12:bd:cc:5e:ec:
22:aa:f7:cb:b8:be:dc:77:8a:d6:1e:0c:e7:c2:25:e4:47:9a:
f3:4c:16:b1:c8:d2:4c:4f:8f:1b:ee:7d:bc:3c:28:37:58:80:
56:d0:e5:5e:41:96:67:76:bd:07:79:7c:a4:1e:cf:24:65:72:
1b:52:72:4e:95:fb:b3:e0:12:12:30:76:9a:57:7a:20:20:d4:
64:44:bc:8d:d7:f7:4b:c1:40:81:4b:55:14:cd:00:63:8c:21:
a6:a4:1e:dd:14:0b:bf:85:2f:1a:46:c8:2a:2b:ac:47:a9:56:
11:3d:57:fb:34:f1:c5:a3:44:85:b3:3b:03:bb:2c:f2:b7:2c:
20:0d:46:2f:01:d3:ec:22:b0:13:69:53:ee:0f:e2:e9:48:7a:
37:b8:64:fc:d6:39:57:dc:c1:93:3b:98:42:35:f9:0a:db:30:
b2:bf:40:8a:30:9e:d4:b6:a9:5e:d8:d7:1d:00:35:9e:65:a3:
11:6a:8e:36:4a:41:96:95:38:1d:bb:8b:cc:de:61:05:41:a1:
97:6f:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:49 2025 by rpki-client