Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: P2SwEnST7hE0uH2QYl72Fa4XgCZKrEi5ehRc6K0SV/4=
Subject key identifier: 22:7F:B4:6E:16:A7:D0:11:2A:B0:25:6C:CA:A7:57:0D:A8:BC:08:3E
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 0197499F1368048B9B06BF1457A8102D8390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: fNFbHw5RupB35/hDqFFu7g1fir9TIBk5LLU+4y61vQw=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:13:68:04:8b:9b:06:bf:14:57:a8:10:2d:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=227fb46e16a7d0112ab0256ccaa7570da8bc083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:1e:08:87:bf:8c:20:cd:26:ed:cf:56:7a:
15:be:25:fa:22:be:83:02:9a:e7:4a:a4:0a:8e:24:
21:eb:59:84:97:02:80:b4:22:d7:f6:8e:53:15:93:
03:b9:03:b0:08:d3:3c:a2:a3:9e:09:82:12:77:52:
7e:89:87:4a:9f:b3:f3:8a:bd:3f:7d:d8:2f:fb:80:
86:ea:4b:ef:56:4d:1a:d6:d7:ff:3c:22:69:59:d3:
1a:ad:fc:0a:a3:09:35:f4:20:6f:42:0b:f0:61:29:
6a:e1:37:9b:15:8a:3f:a9:bb:75:20:f5:90:85:ee:
2f:94:2c:3f:26:2d:1d:c9:59:b7:48:0e:a3:47:80:
28:c2:a7:c1:f7:2a:df:0b:6d:12:be:23:2b:e5:66:
95:19:07:29:70:99:3a:e2:9e:42:5c:29:3e:90:82:
b3:a2:91:83:3a:ef:1e:53:aa:a0:17:aa:31:00:35:
40:3d:cb:65:cb:6a:0c:52:0c:7b:91:fd:c0:2d:92:
10:2b:0a:55:b7:7b:2d:74:d2:b3:6a:32:15:63:a5:
2d:54:02:9b:e9:0c:2b:ac:f0:ce:6b:e4:3e:4e:aa:
54:20:eb:8d:5d:a7:d5:4d:c0:be:f6:62:70:ad:bd:
f0:53:7e:95:1b:8a:b4:6a:23:3f:74:bd:7f:66:64:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:B4:6E:16:A7:D0:11:2A:B0:25:6C:CA:A7:57:0D:A8:BC:08:3E
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:83:5b:21:8b:ba:62:63:c4:92:e2:1e:a2:1d:e4:28:c4:3d:
16:c6:68:b1:94:be:7d:88:d1:e8:95:3e:0a:aa:31:78:40:81:
1a:10:8b:38:89:e8:4f:35:81:41:39:96:e8:05:a6:1d:b8:0d:
95:fb:fa:90:21:b2:34:80:da:72:fd:7c:9d:ff:73:8d:c8:9d:
d4:d1:4e:00:b1:c6:e9:36:c5:e9:cc:4c:51:23:07:6e:3a:2d:
4d:5a:f2:bc:24:cd:7a:93:4a:53:b4:92:5c:01:3e:71:fe:b6:
e7:9e:20:6e:a2:4f:ac:72:3b:dd:24:ed:2b:d4:84:78:cc:54:
99:01:fe:91:f2:d1:58:59:94:35:b9:ad:26:26:80:e2:5f:51:
78:a8:94:36:ac:20:d6:fd:14:62:ba:41:68:61:37:79:a7:aa:
0d:13:d3:c4:ed:07:46:0f:e3:a3:07:eb:6f:27:e7:26:79:3b:
0c:f2:7f:4a:12:81:76:86:81:16:1d:2f:b2:e7:ec:62:e8:69:
7e:f2:5b:52:fa:06:1a:37:86:bb:f7:03:fd:d0:1a:16:26:65:
87:60:37:4c:45:1d:59:cf:a4:c3:b4:a4:d8:21:d5:9d:77:05:
fe:9f:f8:36:b3:25:cb:c0:98:3a:11:27:4b:8b:19:01:08:31:
27:46:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:48 2025 by rpki-client