Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 9y4r5afjGLUxHPVnr6RJXuCRTgdRWsUQW27LGZEAdLY=
Subject key identifier: 1A:B2:95:7F:42:DF:45:F3:A6:C3:EE:11:3E:60:44:4A:65:C6:14:97
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019759B69F38A9C6EBC2C3DCFE9EE4801029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 12:00:29 +0000
Manifest this update: Tue 10 Jun 2025 12:00:29 +0000
Manifest next update: Wed 11 Jun 2025 12:00:29 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: rcYDq+CXOFmrHSKUjloecAnK/rQshahr2ixUXSfPWQg=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:9f:38:a9:c6:eb:c2:c3:dc:fe:9e:e4:80:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 10 12:00:29 2025 GMT
Not After : Jun 11 12:00:29 2025 GMT
Subject: CN=1ab2957f42df45f3a6c3ee113e60444a65c61497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:bf:e0:6a:3f:37:54:8e:9a:18:ef:b7:0d:
1b:f1:67:78:c2:8c:ec:3e:1d:4c:83:c8:08:b7:be:
6e:a6:10:b9:80:b5:f4:23:06:64:4f:79:de:bc:38:
f1:19:ba:4a:f7:78:2e:02:32:a8:a6:70:69:44:3a:
14:41:2d:4c:f5:b6:70:17:59:ff:1a:aa:a7:b2:bc:
ad:7d:76:d1:f4:2c:44:2b:54:8b:98:3f:98:84:ae:
33:00:d0:0e:30:de:80:ce:9b:22:34:12:5c:5f:0e:
22:a4:0d:2d:73:a9:8c:a1:b2:e9:e7:52:6c:c9:a1:
f8:8a:f0:f8:42:b2:b5:b3:c6:36:42:e5:8c:d7:48:
06:73:3f:b0:8f:65:27:df:9b:2c:44:24:f5:7e:30:
17:e0:a9:65:5d:66:f6:bd:8a:14:5c:e6:e2:99:10:
fb:1f:5f:bc:8f:00:56:b5:51:dc:2b:0b:f5:f8:34:
75:de:2d:32:76:ee:a2:e3:05:43:85:c0:23:19:70:
7c:78:57:94:4e:f3:ef:70:06:31:e7:c4:d8:ae:78:
9c:28:c9:b4:62:89:92:c3:1f:f2:67:bb:8f:93:be:
d6:b2:ed:0b:8b:0e:cd:1b:57:7f:de:78:cc:bb:31:
0a:48:d0:c6:11:46:4e:eb:5e:03:19:48:99:dc:ed:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:95:7F:42:DF:45:F3:A6:C3:EE:11:3E:60:44:4A:65:C6:14:97
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c9:6a:c2:a7:3c:43:6c:a3:85:e8:df:13:c6:01:31:e1:a1:
99:b3:8c:fc:cb:37:d3:c8:f5:bb:92:4a:01:59:f0:5f:54:67:
4b:d5:7b:d0:e5:ac:9e:7c:b1:8f:03:26:e8:3e:b5:3e:de:7d:
b1:28:63:de:d7:00:33:19:b8:37:13:b4:55:bb:86:72:c0:98:
53:7b:f7:93:51:13:f5:35:c8:5c:42:ab:b8:d5:c1:0e:04:d1:
0b:5e:9a:7d:bb:81:1e:dc:01:a5:75:54:8e:5c:e5:d9:40:3b:
d5:65:eb:3b:df:cf:c3:15:07:ec:b2:0e:80:7f:78:fe:01:e0:
c4:d2:4a:0d:9b:2d:ee:dd:af:45:f0:87:0f:53:68:2e:e9:b2:
f8:ea:47:d7:b7:1d:61:cb:40:71:0b:2f:9f:71:75:65:58:81:
6d:58:82:7b:0f:67:e5:ab:9f:0d:43:a1:78:38:c8:5b:37:5e:
2c:8a:a7:0d:05:43:8e:df:0a:2a:4f:67:18:c1:72:3a:30:4a:
45:fa:ba:3d:4c:13:2d:df:e0:28:9f:82:da:d2:98:ad:22:ec:
70:81:12:b2:78:46:8c:26:9f:10:cf:f9:4b:98:e1:84:75:6b:
d2:b6:73:6c:53:b3:eb:df:91:b5:ce:45:ca:52:22:7c:2c:c7:
82:56:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:28 2025 by rpki-client