Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: piTkujxwFXGU8CreRDFNruKgcOqUtBtmb8+KYuw5kiA=
Subject key identifier: 57:EE:D7:47:F0:33:19:CD:A5:E1:85:32:5A:68:24:B1:3F:5B:6F:EB
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 01974E2089C27044C271E55A4EAFDC70967A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 095C
Signing time: Sun 08 Jun 2025 06:00:44 +0000
Manifest this update: Sun 08 Jun 2025 06:00:44 +0000
Manifest next update: Mon 09 Jun 2025 06:00:44 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: jeGG6alobYOqIFsDGZ+yrr0Rbu3GO6J3YGQ7SO6rMGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:89:c2:70:44:c2:71:e5:5a:4e:af:dc:70:96:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Jun 8 06:00:44 2025 GMT
Not After : Jun 9 06:00:44 2025 GMT
Subject: CN=57eed747f03319cda5e185325a6824b13f5b6feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:d2:85:54:40:ec:fd:a0:a1:7f:98:20:54:
2a:04:f9:7c:c6:95:02:c1:70:bb:5c:3e:c4:99:7d:
15:cc:56:88:b6:2f:bc:1a:e0:eb:72:e4:25:c8:50:
21:0f:60:94:a2:44:d1:cf:5c:46:a1:09:8a:af:7c:
e3:a9:a1:5b:54:ae:ad:bc:08:e8:94:8f:0b:73:af:
76:88:4f:c0:19:72:19:11:25:1e:c9:bb:1c:87:38:
bb:a7:1d:d2:d5:72:f8:13:46:a8:c2:5d:91:3e:d7:
df:3f:ae:ed:59:42:d9:21:49:ba:ae:21:2b:97:4b:
bf:0f:ad:d2:ed:bb:e9:41:ce:52:fe:0f:79:be:9a:
15:3e:af:a7:ca:03:6b:27:35:31:b2:ef:2f:40:6c:
cd:c1:1f:cf:e0:84:2f:25:95:77:93:7d:bc:3b:52:
d6:ab:54:c7:83:85:80:b1:c1:1b:f5:9d:10:6f:76:
3e:08:ce:8a:ea:2a:7e:e1:de:35:69:ed:ce:09:c6:
47:e1:e7:7c:66:af:d8:20:a2:13:df:ad:08:c7:03:
d8:4b:98:f5:fa:07:58:92:82:47:a3:e1:58:78:1a:
39:68:1e:77:f3:62:9c:1b:33:e6:05:58:37:98:96:
01:c9:6e:40:51:d7:7f:c0:f2:69:32:31:20:f0:75:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:D7:47:F0:33:19:CD:A5:E1:85:32:5A:68:24:B1:3F:5B:6F:EB
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a5:13:6b:d3:6b:e2:ac:13:4e:c1:3b:2a:a4:c1:f8:91:79:
42:11:11:88:df:a8:a3:b4:63:36:fd:fc:4b:d3:4a:2c:bc:ca:
f8:2c:42:83:1a:82:a7:51:f4:8a:d2:76:67:f9:3c:46:85:5c:
ac:0f:2b:33:03:05:0d:c0:de:b8:ed:4c:62:6a:37:4d:93:b5:
ca:62:35:92:ef:34:1c:13:e5:9c:ec:a8:62:ed:97:31:a3:02:
09:52:48:c8:94:74:50:a0:6f:9d:06:a7:1b:b4:81:4d:3a:4a:
b2:e4:c7:f7:80:ce:88:1f:48:b9:a6:60:2e:f2:2c:78:07:1f:
06:da:d8:5c:72:00:3c:08:15:e8:6f:2b:aa:c6:55:9c:66:e8:
fa:05:58:3d:23:27:c8:94:b6:1f:df:3e:2f:2b:f9:0f:c7:41:
e2:03:ce:2c:0d:2d:44:83:cf:e4:b7:b7:e9:c0:8a:99:96:97:
51:e3:e8:2b:d5:ba:f2:ca:73:f9:25:00:7e:a8:d2:c4:a0:5e:
c9:96:fe:28:5f:64:01:00:ff:47:2f:7b:5a:21:cb:f6:a1:1a:
ac:09:bb:1a:32:d2:88:05:2a:a2:a9:a0:70:58:fa:dd:52:79:
07:90:a4:11:bc:6c:6d:3d:29:3a:6a:04:56:d3:0f:b0:da:47:
12:3e:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:07 2025 by rpki-client