Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: GQDaL70em4iIKw5SgQywPVfazbE+TADkq8OWwT3T2CQ=
Subject key identifier: D1:64:25:AE:D9:7B:AF:87:E0:08:0F:A3:75:D1:D1:D6:EC:AA:81:2B
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 0197499F54214AD92FFD1D430110066FC78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: VBvROYYYn5S9hiDQHFKCUOsBS5uxUruM3urABPj2NUk=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:54:21:4a:d9:2f:fd:1d:43:01:10:06:6f:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=d16425aed97baf87e0080fa375d1d1d6ecaa812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:8e:fc:3c:3e:c7:f4:d6:58:f9:f1:f7:46:
11:2f:f7:be:f2:ab:c3:c4:66:02:84:32:aa:11:d3:
91:14:81:aa:99:8f:3b:9f:8f:be:25:0b:33:9d:f8:
bc:11:c8:73:36:03:8e:3c:f4:a5:f0:0f:5a:4b:e9:
7f:8c:b7:a2:9e:da:23:40:8e:0b:e9:2a:04:86:65:
9c:f8:cf:32:12:f4:fa:dd:02:e0:8d:84:16:cb:2d:
86:8b:e6:71:33:90:d1:52:ae:90:da:86:55:94:45:
27:8b:f8:32:1f:65:a6:4a:08:84:81:fc:e2:54:32:
55:0b:92:bf:a6:9c:67:e2:87:68:2f:45:ea:a1:b5:
75:a9:c8:6a:c4:d6:9f:a1:72:3e:b8:2e:08:a7:dd:
9a:69:a1:7a:ef:14:f6:68:53:dc:30:d7:28:04:2c:
4a:a9:f8:ae:cd:69:3f:28:43:28:34:92:3d:04:d2:
14:c5:15:a0:24:8d:2c:da:47:95:76:74:ba:79:48:
60:48:92:38:4f:b4:4b:50:59:97:15:d4:8c:6f:94:
f6:7f:22:de:56:43:fb:4a:c4:1b:4c:66:f2:a9:2d:
8e:83:06:1e:41:7b:30:66:c4:b2:f2:e3:2d:51:07:
a1:89:31:1a:75:f1:25:a8:64:4c:14:08:08:72:ba:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:25:AE:D9:7B:AF:87:E0:08:0F:A3:75:D1:D1:D6:EC:AA:81:2B
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:5b:b2:2e:9e:05:84:dc:a2:aa:04:9d:fd:f0:17:b9:db:
25:ad:2c:86:ca:54:88:1c:40:ca:9a:34:ab:f4:6e:46:4f:bc:
b8:75:9b:2d:53:fa:3f:06:18:5a:bf:32:0b:bc:56:c9:8d:07:
db:d0:17:56:21:c1:d4:17:54:74:8e:73:7f:31:1c:d2:9b:fd:
ee:e9:6b:fd:67:c7:27:01:88:0b:44:8e:05:3c:2f:c8:af:12:
6a:f2:d9:97:ae:f7:c2:36:e0:19:4d:e1:cc:ab:27:4b:8a:44:
ff:25:5c:34:98:26:64:7f:70:25:2d:0a:46:38:e4:e1:63:8a:
23:20:74:5e:24:17:ae:ff:dd:52:34:66:a8:c3:f2:8d:f9:d1:
4b:71:33:fc:47:1b:5a:c7:32:3b:4c:d0:d0:07:2f:de:dd:f0:
9f:0f:58:35:68:a2:21:76:a2:a7:54:92:27:ee:4f:26:12:df:
2d:8a:82:86:6d:85:aa:ce:49:2b:39:ea:51:fb:f4:07:b5:36:
12:00:a8:11:cb:fc:0b:70:7b:79:58:65:f7:00:40:ff:b4:eb:
91:eb:5c:cf:fc:6c:d8:89:92:d2:6d:53:59:42:11:22:4d:d2:
b1:73:c2:a4:72:1a:92:74:7a:62:7c:e3:86:08:e5:b5:73:40:
c5:75:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:56 2025 by rpki-client