Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: iPeXEjpZWDOnzA0Ji4DEqVWQOHPUzX7EkYerg+dMhTM=
Subject key identifier: 45:F8:89:55:D2:ED:05:40:1F:4B:16:60:31:AF:60:38:F5:42:AD:79
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01974C321F03EC7C6445BFCB4E8389AC488D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 21:00:42 +0000
Manifest this update: Sat 07 Jun 2025 21:00:42 +0000
Manifest next update: Sun 08 Jun 2025 21:00:42 +0000
Files and hashes: 1: 0BP0JBjQyAsNJNdCrJuyp2pdn8o.roa (hash: nDwUy32tfTP9yynktWJuQ54pXroVjvopHBVUgVYTrts=)
2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: d7hreTPcrkLl8uJPwSbjKi4lDOkUxDplU/w1BGD6aHY=)
3: gOF-xzAEKX1O-x2b-Oj9o4YnCvs.roa (hash: MQeq/rmEp9bKHzBoxXf16f7fykVrPrRjmB+U1KsVgUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:1f:03:ec:7c:64:45:bf:cb:4e:83:89:ac:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jun 7 21:00:42 2025 GMT
Not After : Jun 8 21:00:42 2025 GMT
Subject: CN=45f88955d2ed05401f4b166031af6038f542ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:1c:b0:26:14:17:8c:49:12:87:c5:62:f3:
ec:e7:ee:db:12:ad:e7:d6:9b:5f:03:b5:a0:46:1f:
82:35:d1:db:08:56:47:94:34:42:f9:02:2c:e2:12:
ba:c4:da:46:08:d1:81:a7:50:dd:87:15:8d:c1:2c:
69:af:6a:2b:32:12:dd:a2:ca:2a:0e:f5:4d:35:80:
b3:c4:5c:56:54:bd:1b:6c:02:75:ad:dc:27:ae:48:
19:d5:83:08:15:08:65:70:39:8d:64:3c:6b:71:e9:
4e:87:10:9c:dd:6d:5e:a1:2a:d9:17:91:6b:50:f9:
0d:4d:59:42:52:42:4b:d1:34:a8:e1:a9:32:91:25:
37:92:27:62:de:19:e3:c7:73:25:f9:d1:62:e0:95:
31:7b:1e:94:dd:c6:2f:82:e3:d4:e4:c2:cf:c1:ce:
a2:c0:e8:3e:28:7c:ae:86:c6:ae:0b:34:fc:d7:20:
b7:ba:00:5a:62:b1:dc:33:47:e9:cf:3a:35:cb:3b:
8b:34:e4:e9:c4:17:ef:8f:18:d6:88:78:49:64:dc:
ed:48:96:45:c7:47:c9:1f:a9:17:7b:a4:79:1b:61:
4b:9e:29:95:ef:53:9f:8c:d8:20:98:a2:ff:73:01:
75:bf:bc:79:7c:84:a8:b3:dd:de:a4:11:e2:79:ac:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:89:55:D2:ED:05:40:1F:4B:16:60:31:AF:60:38:F5:42:AD:79
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:44:ed:6e:7b:d7:aa:2d:dc:4f:2f:0a:0d:3d:7c:96:34:
2a:55:15:1b:ea:74:f7:dc:5b:b0:33:28:7e:5d:03:76:03:e8:
04:df:90:af:b0:65:c2:26:26:35:6d:11:80:e1:5d:f4:a9:e5:
06:05:02:b1:bc:f3:da:52:98:bb:98:a8:a9:dc:1f:df:b4:17:
ec:09:5a:a6:12:ee:3e:c6:09:4b:a3:82:cb:ac:d8:a6:ac:11:
51:b9:dd:a7:a6:96:37:53:a7:e9:98:6a:e6:9c:26:6d:e9:c8:
77:4f:3f:ef:b7:da:62:1b:b4:63:41:50:25:87:cd:4d:9d:4f:
c6:d7:bf:b2:dd:4d:e8:f1:17:6e:87:de:07:94:1f:53:b2:3a:
36:af:ba:bd:e7:32:5a:82:b3:ba:f2:cc:dc:5c:3d:f0:38:dc:
00:f2:c4:ad:27:2e:81:99:65:b5:dd:4c:3f:bd:a7:9d:90:a8:
b9:8f:55:db:f1:0f:26:70:9e:58:f2:27:49:91:5c:02:1f:10:
c8:0f:b9:5a:9a:a3:22:ad:2b:9b:6c:51:69:0d:8b:76:dd:e5:
12:05:53:89:37:bf:40:df:30:6b:75:c0:71:1a:a4:94:38:bc:
ba:d5:62:c0:0c:f0:c3:94:70:81:b0:7f:8b:e6:f8:19:cf:ab:
d7:9a:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:22 2025 by rpki-client