Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: gsIt8bfc1n9YqWFqPgKh7uIQ6nZnVCpnxTdnHpthX64=
Subject key identifier: B9:13:43:7D:94:1A:91:7B:A9:0C:03:2D:1F:89:4C:2C:58:4E:AC:83
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019749D602E8BFE12598726AF40E62061A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 09FA
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: V4XEXR/QzHDTc4+LQKqQUS4f18hz5mQVZG7G9MOAQRA=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:02:e8:bf:e1:25:98:72:6a:f4:0e:62:06:1a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=b913437d941a917ba90c032d1f894c2c584eac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:97:02:56:db:20:6e:a0:b9:4d:dc:17:31:
6e:01:4a:a1:8b:3f:d1:51:56:c4:e6:c0:a0:1a:f0:
14:37:52:34:12:e3:a8:1a:9b:7d:98:65:6f:91:0f:
5c:62:e8:32:7d:e8:cb:4a:a5:25:24:9b:6a:74:f8:
da:98:99:fe:43:99:9c:bf:18:2d:cc:b8:48:c9:2f:
bf:b4:a9:ff:c6:de:7f:3c:54:22:7c:3a:a8:c2:b9:
e1:da:61:7a:9c:06:c9:04:b5:63:b8:c6:1b:f3:11:
8f:a7:09:c3:81:da:26:62:e5:65:60:75:86:b0:79:
e3:12:fd:c0:89:74:15:95:b0:7c:01:db:42:d9:eb:
d8:ad:56:3d:75:42:75:8b:c1:ca:41:b2:64:ed:76:
77:45:be:fd:9c:b6:6a:46:20:fe:41:a5:ef:6f:cd:
f0:bf:b4:f2:74:31:c4:4c:ef:97:99:aa:72:e4:6f:
68:67:b0:9a:41:60:04:7c:a2:e7:9e:aa:f8:13:e1:
36:f9:08:83:39:80:ad:78:e3:3e:d9:f1:50:2b:b3:
8f:b5:a3:0b:fe:14:1b:3a:43:ff:17:70:ad:cc:6b:
be:7d:4f:5a:02:bc:b1:29:65:e7:0a:83:ec:54:0f:
a3:85:ec:18:fd:09:ab:d9:ba:ba:59:0c:07:1d:c2:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:13:43:7D:94:1A:91:7B:A9:0C:03:2D:1F:89:4C:2C:58:4E:AC:83
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:05:73:d4:ab:78:50:05:7c:e1:d1:e6:b0:a9:6d:2e:95:d1:
2b:c7:f9:c0:75:e7:df:51:6e:f3:a1:e1:64:fd:8c:b5:d2:32:
be:7b:29:c9:c9:6d:f3:b9:86:ee:d5:40:7d:d0:05:df:98:5a:
8c:9f:69:63:e3:06:6e:35:cf:ae:93:bc:35:81:30:ef:3a:f0:
14:f2:22:7d:e8:25:c6:8e:96:4f:13:23:e1:5a:c7:12:a8:be:
92:1a:a8:12:0f:d7:72:ff:17:56:ba:94:91:b8:5f:86:df:8e:
18:9f:94:76:99:06:9f:a8:f7:db:d7:9f:cd:b4:b2:6a:58:0f:
49:2f:26:e4:42:64:fc:1b:1b:d4:cb:2b:02:3f:e7:8e:6e:bb:
3e:4d:97:63:4c:93:50:d2:9d:51:05:36:97:e1:ae:6e:f4:18:
17:e9:93:16:be:53:93:1c:27:2a:d0:84:e7:46:e2:e0:60:52:
0d:22:d2:1a:5f:13:f0:09:b5:d8:ef:01:14:78:4c:c9:d7:b3:
86:aa:3a:eb:eb:ed:83:1e:92:cb:bc:26:34:06:8c:e3:9c:35:
a7:62:34:d2:bc:71:ed:fe:d0:e1:aa:38:87:20:d3:e4:56:01:
66:80:8a:ae:24:b4:6d:9b:30:b6:9e:27:af:11:ab:4a:c0:5b:
81:3f:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:11 2025 by rpki-client