Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: 8PiawTGCkE979PDrBdr7dCxm9c2hFmGazg6f7dKbB2Y=
Subject key identifier: 07:D3:F0:E0:07:76:9D:93:81:9F:F7:9E:9D:BC:85:40:B1:4E:57:01
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 01975459B3F32DA7DDBAFEEE201FCC7C8F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 053B
Signing time: Mon 09 Jun 2025 11:00:54 +0000
Manifest this update: Mon 09 Jun 2025 11:00:54 +0000
Manifest next update: Tue 10 Jun 2025 11:00:54 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 1t6EtiWUI2YLDa1mV9b541mPCB74P1+/cTVK1RN995E=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:b3:f3:2d:a7:dd:ba:fe:ee:20:1f:cc:7c:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jun 9 11:00:54 2025 GMT
Not After : Jun 10 11:00:54 2025 GMT
Subject: CN=07d3f0e007769d93819ff79e9dbc8540b14e5701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:87:06:bd:3f:1f:79:39:40:a3:95:bc:31:
20:6b:6e:05:1e:bb:f8:00:81:87:c6:01:16:e2:2e:
7a:1c:9d:97:94:68:66:c2:2c:f6:6f:c3:f0:d8:5c:
92:50:3a:aa:db:0d:7c:8a:95:c3:67:7a:a9:d7:fc:
da:e9:61:fe:4e:4d:99:15:fb:cc:bb:3d:bf:8a:6e:
a3:15:51:87:89:1b:3f:cb:d5:a5:48:c6:24:6f:6b:
29:5a:6c:b0:21:7c:ed:95:c5:9d:61:f0:2c:d5:e6:
01:74:31:87:83:10:ce:69:f5:e5:5a:a4:39:24:33:
6f:d4:da:cd:88:f3:af:f1:08:40:f4:9c:6b:9c:38:
78:5b:fe:d3:ac:3a:fe:0a:72:cd:45:9c:fc:44:d9:
57:f8:aa:72:33:48:e2:31:4e:4a:4f:52:36:22:18:
33:c8:a3:25:41:3b:6e:2f:40:e9:a1:8d:0b:ff:3a:
04:06:c3:0d:dd:79:30:ae:34:dc:63:99:c6:c5:dc:
7c:e1:aa:1f:23:a2:32:af:50:92:c1:41:2a:ea:23:
e2:cd:89:65:5a:24:70:c3:13:fa:bc:0b:0c:eb:b2:
48:b0:ad:2d:a2:6a:85:d4:db:cd:ad:b6:a2:64:25:
fe:2e:d3:3b:18:1e:16:23:f5:5f:03:3d:e5:6d:ee:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:F0:E0:07:76:9D:93:81:9F:F7:9E:9D:BC:85:40:B1:4E:57:01
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f5:f3:a6:3f:0c:23:1e:cb:81:09:dd:5b:d9:fb:d6:f5:49:
84:33:dd:0a:99:39:6d:2b:63:66:be:b9:32:5b:7b:d8:ab:25:
4c:9a:c5:4d:00:65:ee:76:55:3e:83:da:bd:25:eb:b0:36:9c:
bb:08:fb:ec:bc:aa:6b:8e:3d:e7:34:15:e9:07:50:10:55:a0:
5a:9b:7e:88:c4:0c:ea:03:6b:a7:80:2a:bf:43:52:81:c7:5d:
f2:e5:ac:2c:41:1a:b5:56:b4:24:79:13:7a:aa:88:87:8c:a2:
ea:31:31:25:fe:4e:77:90:77:a2:06:21:c6:b2:08:35:ad:65:
36:09:4d:d2:2a:6d:10:e0:94:bb:72:40:30:2e:75:60:36:63:
49:a7:96:02:3a:98:b3:c3:40:e3:0d:72:ad:4a:ea:18:b1:47:
ef:4d:de:18:df:bc:14:3f:c3:1e:1d:37:6b:f4:c0:a0:13:c9:
f2:49:c7:2a:af:f3:00:25:c5:78:7c:67:4f:f0:62:70:70:7c:
2a:9a:e8:14:0c:a0:1e:08:24:a1:64:e6:36:0b:66:ca:27:15:
2e:19:bb:26:80:56:47:d1:b0:e6:ba:3b:82:e1:32:e0:7b:da:
65:87:7e:ce:61:dd:f8:d9:46:49:b9:7a:44:75:84:da:3a:72:
03:7b:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:23:22 2025 by rpki-client