Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: 0cC5FWfEZ3ZekpsfL+ssXOUALnwLBjs+EUf71dHn1kU=
Subject key identifier: 76:C9:AA:CB:9F:E3:20:CA:A6:7E:74:E4:53:FB:AA:06:DC:43:E7:00
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01984475A010C027F0D1EA844269F797771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 1323
Signing time: Sat 26 Jul 2025 02:00:16 +0000
Manifest this update: Sat 26 Jul 2025 02:00:16 +0000
Manifest next update: Sun 27 Jul 2025 02:00:16 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: zw78H6W2GpRns8AXUb0ccneID8JCW3WZgMJvnSmhqkM=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:a0:10:c0:27:f0:d1:ea:84:42:69:f7:97:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jul 26 02:00:16 2025 GMT
Not After : Jul 27 02:00:16 2025 GMT
Subject: CN=76c9aacb9fe320caa67e74e453fbaa06dc43e700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:c8:41:a3:ff:47:ca:5f:a7:b9:7f:5a:c6:
a7:e7:e1:1d:01:92:2b:34:98:a5:58:54:28:98:ad:
23:ff:8c:54:0f:62:a9:51:24:cf:22:b5:bd:e1:15:
a8:f0:17:e0:69:bc:c2:6b:9e:bd:ce:ab:9e:48:36:
b7:7a:a7:dd:52:52:b2:21:e1:c3:8e:c0:c9:4f:48:
0f:d5:c2:9c:66:7b:89:c7:e7:d6:31:44:02:0a:a6:
14:dd:80:64:66:83:95:b2:79:87:a2:71:9f:0d:07:
1f:65:d9:09:2e:ee:2a:cb:c5:75:5f:e5:17:45:83:
1e:e7:ee:4e:56:b4:ea:51:56:51:82:47:ce:be:e8:
80:00:57:38:6d:16:db:b0:3d:55:8c:81:77:0b:4e:
a8:2a:ce:2a:23:90:11:a5:bf:50:3c:1d:7b:51:f4:
bd:df:6e:37:bb:90:2b:25:54:0f:52:63:4b:b0:4a:
13:8a:f6:a7:1f:99:34:a3:57:ea:0a:ab:88:f9:a8:
21:7a:80:67:c3:67:23:f4:8a:48:1f:74:c2:b6:5f:
1f:68:7e:65:7f:c9:69:05:59:8c:82:1c:a8:f8:8e:
9a:c0:6c:85:84:9c:78:2a:ea:b8:a1:63:54:2b:b0:
f9:48:8e:73:97:61:de:32:07:6f:18:f8:0c:25:a7:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:AA:CB:9F:E3:20:CA:A6:7E:74:E4:53:FB:AA:06:DC:43:E7:00
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e7:b9:62:04:40:46:64:df:e4:3c:5a:21:7f:f8:4c:fc:7d:
3e:67:55:99:1f:0d:21:fc:03:e1:63:e8:56:eb:09:e8:4e:a0:
29:d0:18:bf:e2:23:dd:85:95:95:11:86:93:4d:b6:62:88:bc:
54:65:6a:a9:b3:48:cc:1d:0c:8c:24:d4:38:b0:37:7f:17:24:
55:25:6f:06:94:c1:78:ec:c9:80:e3:df:28:87:95:80:d7:ef:
bc:d1:a5:08:70:de:72:ed:bf:bc:7b:14:1d:b5:1a:f1:06:bf:
a5:ed:c4:f3:84:1e:88:55:f6:f4:48:10:1a:2f:a2:54:d3:37:
a1:fa:c5:d1:ba:70:c8:8a:2c:cb:1b:ed:6b:29:54:61:5f:95:
13:41:a7:41:67:40:b3:ba:b0:6e:95:29:4d:26:5c:a7:b1:2e:
ad:27:21:ca:6a:b6:04:8e:87:9d:9e:f3:ed:86:1a:48:40:01:
5d:f0:e9:e7:ab:5b:17:16:a2:7e:16:f2:d7:3c:ee:fc:79:d6:
13:89:5c:ce:7f:30:75:6c:a7:2a:f3:6d:10:ba:94:4b:cf:4d:
89:59:9d:26:13:8e:62:10:1f:fb:e1:45:23:5f:ca:ef:13:91:
b6:f8:1c:9a:9c:f4:e2:c5:d0:c2:e1:cc:76:e7:87:29:35:4a:
c1:67:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:12:02 2025 by rpki-client