Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: +0n9pX09SUWPjRdzCQoZl9VNpkWVx3+E3O5LLeKunQ0=
Subject key identifier: 16:02:12:64:74:0F:E0:FF:9F:4B:EE:00:49:4F:C4:EB:51:65:1B:8D
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 01974DB2C8F29F28842EB7055BECB8DAE3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 0FD7
Signing time: Sun 08 Jun 2025 04:00:51 +0000
Manifest this update: Sun 08 Jun 2025 04:00:51 +0000
Manifest next update: Mon 09 Jun 2025 04:00:51 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: d0ao/XOKjJmkFiqqLRmRXb0Q5gZnJEd47RsTur2U+Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c8:f2:9f:28:84:2e:b7:05:5b:ec:b8:da:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Jun 8 04:00:51 2025 GMT
Not After : Jun 9 04:00:51 2025 GMT
Subject: CN=16021264740fe0ff9f4bee00494fc4eb51651b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:a5:15:dd:61:25:85:67:00:a9:07:a4:6e:
60:be:d0:1c:0d:2b:1d:60:df:04:e2:1d:ec:db:b3:
a5:b5:2b:a9:8b:6f:d2:d0:5e:d3:f6:ed:87:9c:b9:
6b:8f:3a:a0:91:82:1e:b0:71:ba:04:2e:ff:79:de:
bc:67:1d:62:46:9f:01:df:bb:f1:aa:03:9a:40:bf:
15:b7:0e:4a:c5:2d:cb:33:5e:40:fd:44:bf:60:e6:
55:9f:6e:97:3c:ab:49:02:b0:db:20:08:3f:f0:45:
cd:ef:98:1f:19:2d:ee:da:13:1d:1d:61:13:18:de:
42:d4:45:f7:a2:4e:28:15:f1:96:44:45:96:a6:80:
52:f4:b8:2b:cc:45:d8:f8:f4:bd:ae:84:48:14:b9:
5d:7c:fe:a8:92:52:29:17:dd:0e:71:a2:57:66:30:
a7:15:2a:55:b2:89:1b:23:5e:4e:9a:7b:4a:ee:b6:
a4:66:61:2d:c6:5a:5f:6d:be:0f:9d:24:7e:f9:33:
8e:82:86:2d:8b:f2:09:21:83:45:e3:5d:ea:a5:05:
ee:0c:c0:7a:91:98:2b:86:86:fb:4e:30:c1:97:3c:
e1:18:2c:13:34:96:c0:34:66:30:69:c8:e1:05:89:
24:cc:09:c7:28:70:20:86:bc:98:13:31:0a:14:48:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:12:64:74:0F:E0:FF:9F:4B:EE:00:49:4F:C4:EB:51:65:1B:8D
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f0:0c:61:b6:b6:fa:d4:44:b2:20:f0:71:35:c9:57:65:62:
84:29:a3:0f:0b:49:8e:81:b8:db:6c:82:ec:ad:c2:c8:d0:f7:
b0:a8:59:f2:65:19:fc:51:4a:0e:53:52:34:dc:1b:a0:1b:3f:
94:2a:89:f8:02:2b:5e:2e:14:08:e8:77:c1:fd:16:bf:79:4f:
2d:a9:0b:be:6d:ea:f6:d0:2e:b2:03:9f:17:40:7e:e3:9f:87:
e4:3a:df:a0:a8:0b:a4:5c:b9:52:ed:1c:8e:cb:e6:ab:ad:85:
5a:74:7b:7a:18:3c:97:8f:e0:f3:fc:51:14:db:7f:77:ce:22:
b9:a9:b8:80:c9:54:b0:bb:f6:89:8f:62:b3:af:aa:f9:ad:c5:
06:d1:c1:98:8c:ef:06:b6:89:74:7c:16:cf:d4:9d:88:3f:2f:
f3:02:16:91:62:fc:f1:ba:47:64:15:05:48:56:9d:a4:a5:47:
c1:ec:e4:8d:cb:af:c7:01:72:03:57:87:bd:23:2a:f9:5c:4f:
7f:6e:30:9e:20:b0:e6:c7:0a:43:ff:09:27:58:a5:78:cb:76:
ad:60:65:3d:50:d6:c6:3e:80:de:62:33:84:f6:ea:7c:51:2d:
af:de:ab:d0:df:ad:96:d9:f9:94:ec:06:dc:ce:a0:3a:94:cc:
74:8c:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:17:52 2025 by rpki-client