Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File: 4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier: KxocEmwjEIJOIxewlZGrJVcuSUrWffABCnLHiRN/OKA=
Subject key identifier: FB:E9:02:91:10:68:D8:03:E5:7B:68:88:AB:97:28:E6:B0:29:EB:C5
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer: /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial: 01974CD6C78A95A693C234BB2C41821752D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number: 088B
Signing time: Sun 08 Jun 2025 00:00:33 +0000
Manifest this update: Sun 08 Jun 2025 00:00:33 +0000
Manifest next update: Mon 09 Jun 2025 00:00:33 +0000
Files and hashes: 1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: X1aJu9BqhLUi9amW8gvLJt4k4KkpY9F5ZD9OYoNnA6k=)
2: 93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (hash: +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:c7:8a:95:a6:93:c2:34:bb:2c:41:82:17:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Validity
Not Before: Jun 8 00:00:33 2025 GMT
Not After : Jun 9 00:00:33 2025 GMT
Subject: CN=fbe902911068d803e57b6888ab9728e6b029ebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:a6:9a:c7:5f:8d:5a:5a:7c:37:a4:94:25:
a9:f2:cb:95:6f:03:f5:31:ce:2f:70:b1:a9:2f:aa:
dc:be:a9:75:8f:41:a1:4a:11:3c:2b:e9:2d:e2:fb:
cc:58:33:ca:1f:5f:c7:4b:2f:c2:28:4b:b4:7f:eb:
27:26:c7:d4:04:09:a7:a2:f0:3d:3a:29:ae:d2:66:
30:a6:ea:08:e1:3c:45:4c:0d:eb:9f:7e:ee:1f:1d:
80:4c:33:14:c4:ce:12:86:64:0e:e7:17:a3:25:46:
70:49:48:45:ce:f6:03:12:f6:ca:fa:b9:49:d6:99:
68:86:40:38:6a:d0:cf:e8:67:66:fd:00:d6:65:5c:
e2:b8:1c:e4:11:3d:12:c8:f6:17:6f:94:b3:47:c2:
c9:fc:c2:75:50:3b:b9:6b:99:b4:a6:eb:26:d7:bd:
b2:4e:fa:62:7e:fa:55:46:05:03:7a:bc:19:de:d2:
8c:2a:6e:4e:89:80:cd:23:e1:34:72:c8:54:e0:66:
58:8a:5a:d6:3e:3c:7d:a4:95:4a:1d:ba:56:09:d2:
f1:05:ae:d4:d6:81:0f:1b:18:45:b8:6e:30:c7:1a:
88:45:25:c1:5d:75:6c:2d:7c:db:c7:0a:80:41:b6:
3c:00:89:9f:5d:5e:ca:cb:c6:99:1b:23:0f:29:3b:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:02:91:10:68:D8:03:E5:7B:68:88:AB:97:28:E6:B0:29:EB:C5
X509v3 Authority Key Identifier:
keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d4:f8:90:89:5f:6d:70:b3:1f:c1:ea:a5:c0:dc:b2:9a:6a:
b2:1b:33:81:06:0a:58:74:88:14:dc:b0:0d:17:6b:2a:10:91:
b0:18:42:3e:57:a8:97:e5:2d:f6:6f:64:07:1c:1c:7e:de:b0:
d2:e4:30:2e:b1:35:78:37:e4:0f:f2:39:ee:15:c1:70:2a:df:
c2:19:8d:6d:03:f9:53:8a:1e:ce:69:c5:1c:22:a9:08:25:00:
5e:50:00:cf:7a:60:b9:bc:f0:b5:c8:45:85:ab:5d:3a:59:ca:
a2:14:f7:95:30:99:9b:e3:8d:ef:63:91:10:c8:c1:89:55:d0:
4c:0d:a0:57:e7:72:1c:82:ed:84:22:59:28:2f:2b:c1:93:ab:
8e:56:aa:35:e7:dc:ab:b7:7a:6f:55:f3:74:c5:0e:d7:9d:b5:
8f:6a:95:36:3a:95:d9:f7:0e:d8:44:06:ce:86:bf:03:74:85:
1c:84:d3:45:6c:0a:0b:cf:10:f1:be:f6:49:05:df:48:a2:0a:
69:2d:7f:e7:2a:d7:13:98:76:24:19:39:f9:85:41:3a:66:25:
45:2c:1a:e2:98:66:38:02:7e:3b:53:ad:c8:13:09:94:51:75:
24:68:f9:dd:e3:b4:67:9e:69:b6:7d:2c:83:8f:0e:32:05:d1:
73:38:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:34 2025 by rpki-client