Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 8mL4xyqcZnEGEWmt85sdqDmVeRpieD6pgOvdgIfQfTE=
Subject key identifier: CC:29:EB:D5:FE:7D:AB:21:7D:E6:5F:EE:96:6A:43:BF:15:DF:E3:9C
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 0197635F2ADC9D014603539AA608C37844B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1592
Signing time: Thu 12 Jun 2025 09:01:10 +0000
Manifest this update: Thu 12 Jun 2025 09:01:10 +0000
Manifest next update: Fri 13 Jun 2025 09:01:10 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: AZdKSxZpFj0OffDFAazQ6tN0OcR+hGq8td+tRoOv1NI=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:2a:dc:9d:01:46:03:53:9a:a6:08:c3:78:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 12 09:01:10 2025 GMT
Not After : Jun 13 09:01:10 2025 GMT
Subject: CN=cc29ebd5fe7dab217de65fee966a43bf15dfe39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:a9:13:df:e2:64:09:50:ef:bc:cb:9d:e7:
98:de:dc:43:c4:97:fa:9e:f1:b8:cf:29:d4:2b:1e:
0a:a1:e3:cd:fb:f9:9a:03:b4:7b:5a:76:50:5e:86:
02:91:8e:0c:b9:9b:84:f4:1e:cf:65:ec:95:45:d9:
7b:ec:97:ac:12:33:44:99:7f:e2:54:da:a8:55:59:
71:8c:da:e1:c9:4b:d0:fc:63:4a:db:a9:e9:e6:22:
b7:dc:7d:46:57:39:3c:d7:b8:03:8c:b7:f4:e2:70:
57:1d:a2:cc:56:78:94:0a:70:14:5b:3d:60:4e:fa:
fa:97:ae:1e:f0:b9:7f:c8:30:cb:4e:1e:13:7d:af:
ce:c5:00:c2:27:d4:6d:d0:6a:14:07:b5:9e:53:74:
a8:67:fb:0d:f0:16:8d:57:23:6a:04:4f:13:79:bc:
68:db:83:01:8f:ad:48:0f:25:45:91:69:86:24:c8:
38:33:3b:c6:8f:50:97:0a:d4:88:a8:ea:b2:22:eb:
bf:fd:5a:88:e2:69:a4:9a:ed:c2:71:11:c3:4e:aa:
db:48:89:cc:6f:bf:9e:45:9a:99:74:d7:f7:d7:f0:
4b:9a:14:20:4f:4c:5e:8e:4b:92:fe:f0:f4:40:b8:
51:dd:39:4c:c8:65:e2:25:e5:bd:c5:ca:78:11:09:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:EB:D5:FE:7D:AB:21:7D:E6:5F:EE:96:6A:43:BF:15:DF:E3:9C
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:96:2b:c4:1a:a1:f8:b7:12:a5:b8:fc:50:be:c1:0c:bc:
a2:40:71:3c:d0:a3:87:8c:89:37:53:b9:0e:22:3e:6c:00:8e:
3c:47:05:42:8d:e3:52:74:4f:8d:45:5c:3d:4f:81:64:7d:83:
8a:4e:33:8f:09:81:a0:b9:17:d6:3a:b3:51:76:07:b1:69:45:
65:bf:d3:c7:5d:8d:c4:4c:c2:11:18:a2:aa:43:f8:11:bb:60:
1b:0b:0a:db:67:99:50:60:cd:ef:56:cb:a8:39:3b:38:75:d9:
d1:0f:dd:fb:84:0d:99:f5:8d:4a:79:dc:ac:7d:12:0f:b1:db:
58:bc:40:16:8e:41:af:da:7a:0b:97:cf:3e:36:32:fc:b4:d0:
d3:38:21:63:14:b8:7e:21:24:1c:a2:cc:84:0f:1f:99:8a:2b:
e6:ac:0c:dc:38:79:03:b9:3a:37:9f:8d:0a:8d:44:c2:20:f4:
59:a8:84:4b:9a:13:f3:70:a4:64:72:eb:bb:c7:24:32:6c:78:
f0:6b:27:d7:d0:72:dd:9f:4f:7d:f7:13:b4:48:cd:22:cb:bc:
45:ea:17:cf:af:49:9a:b5:3a:68:66:d7:6f:97:9c:62:74:50:
27:d4:56:eb:3c:f8:2a:05:40:1a:76:54:12:39:67:98:6d:16:
7c:36:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:10:04 2025 by rpki-client