Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: SruHbjdiEVQknxHiBneP5BaiOr+wxBDFVE6eGI9eAo0=
Subject key identifier: 04:87:FC:6E:91:C4:C9:39:2F:8D:A0:70:A7:53:EB:6B:34:82:55:68
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 01978734670FBB014815A0D87D4D6F10D839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 08:00:47 +0000
Manifest this update: Thu 19 Jun 2025 08:00:47 +0000
Manifest next update: Fri 20 Jun 2025 08:00:47 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: j5rTt9NCHcviGRCk/uqW2OWKFajfZUdfqYkYTyXgjGo=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:67:0f:bb:01:48:15:a0:d8:7d:4d:6f:10:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Jun 19 08:00:47 2025 GMT
Not After : Jun 20 08:00:47 2025 GMT
Subject: CN=0487fc6e91c4c9392f8da070a753eb6b34825568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:53:af:e5:4c:57:d3:96:33:ed:19:51:2b:
da:6c:8f:e4:13:9f:8f:ea:7b:ce:10:4c:36:9e:c3:
ec:4e:4f:61:a9:fe:b7:0c:09:e3:7f:99:d6:0a:0d:
cd:0f:e2:72:dd:a1:de:40:0b:e3:6d:74:c6:b7:cc:
79:87:cb:85:36:8f:ca:aa:ad:7c:6c:7e:60:03:d1:
5c:7e:f5:76:20:ee:a4:58:77:0a:f2:42:11:a8:9b:
4c:40:f9:f6:d2:b8:41:7c:03:02:49:44:ca:6d:93:
c7:3f:2a:fe:c5:d0:d0:a4:e5:df:21:70:02:8b:0b:
01:09:a9:a8:12:6a:bb:f9:90:89:ec:f6:2c:c4:37:
82:5c:46:13:08:1c:92:4b:08:27:61:ee:9b:cb:33:
13:15:bb:32:a0:01:b7:39:2a:e1:95:ae:06:0d:c2:
8f:36:83:4c:f9:02:f6:d4:57:38:9c:5a:3a:ed:71:
79:8e:36:84:89:dd:a8:09:bf:52:3f:40:f3:dc:fb:
64:3b:b2:d6:fa:08:d1:39:19:ac:ce:57:5d:1e:cf:
0f:c0:ff:9f:11:21:88:34:2e:91:99:cf:f1:c7:e5:
ee:5e:16:70:ce:a8:ca:21:2b:65:6b:df:74:81:ba:
9e:a7:f8:64:69:6f:97:bd:fc:98:f3:bc:89:a1:90:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:FC:6E:91:C4:C9:39:2F:8D:A0:70:A7:53:EB:6B:34:82:55:68
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:e3:6a:1b:ed:20:8b:b7:39:9a:a3:8b:70:fd:16:25:d8:
8a:af:8f:2c:a1:73:ac:4c:d2:9d:4e:de:8c:ea:2a:f1:34:90:
6e:3c:27:cd:cc:eb:9c:5e:1b:8b:c9:0e:3e:fc:22:3c:02:29:
9d:77:c9:39:b3:cb:1f:1e:df:3a:54:f7:f4:fe:cf:b6:ae:b2:
42:76:18:81:62:5a:30:53:d2:ae:08:cd:b1:20:b4:45:05:ee:
fb:a8:dc:5b:cd:9f:7d:a1:20:b4:ec:af:33:a1:24:3a:4b:7c:
bf:38:44:b4:13:c2:78:31:84:77:d3:be:08:47:92:19:5c:7d:
93:2b:9b:c0:91:40:ad:f2:ee:b3:fc:1c:f7:d9:5d:53:18:36:
26:de:c1:46:bd:dc:47:48:33:ce:be:18:76:38:0e:c4:7e:f9:
b2:b2:8c:cf:a7:59:dc:c3:77:8e:7a:4c:eb:9b:8c:b7:c3:36:
6d:ae:b3:17:f2:14:04:31:ef:f8:69:73:35:39:9d:ec:1b:ad:
69:1a:d8:50:bc:bd:0f:fb:44:72:77:00:a6:f0:4b:7d:25:ba:
13:1a:f3:22:6d:fb:fb:7c:b9:2c:5c:96:1b:2b:8b:ec:aa:96:
4f:2e:36:cf:0d:b2:29:33:e8:69:87:10:18:0b:cf:d1:f2:cf:
6d:72:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:14:54 2025 by rpki-client