Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: NOrVWeTAUh7hEEV55VNuI1gLVGv9BuyIuCOroxdOZFk=
Subject key identifier: 32:A9:62:98:CA:F1:99:A9:F6:CF:54:37:E4:7D:DD:2C:85:ED:6B:97
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 01974B5650EF6FEDA354F82729177C794144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 07F3
Signing time: Sat 07 Jun 2025 17:00:37 +0000
Manifest this update: Sat 07 Jun 2025 17:00:37 +0000
Manifest next update: Sun 08 Jun 2025 17:00:37 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: coiOFQhfpuEKuylHC+B3908eD2zqiNGAGH5HqU437kE=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:50:ef:6f:ed:a3:54:f8:27:29:17:7c:79:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jun 7 17:00:37 2025 GMT
Not After : Jun 8 17:00:37 2025 GMT
Subject: CN=32a96298caf199a9f6cf5437e47ddd2c85ed6b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:9e:fa:f0:c6:b2:aa:c7:10:3a:ab:4b:ed:
5a:21:a5:55:57:26:b0:e2:52:75:23:02:b4:97:ed:
a0:e9:cb:eb:07:b8:15:b0:2e:21:5e:44:82:46:53:
16:3c:e2:0b:cc:56:46:b5:c7:7d:29:a5:7b:3d:91:
d9:f5:65:3d:dc:c1:11:2b:b6:4e:74:64:c7:20:92:
b0:75:53:46:1c:7e:3b:32:d7:9f:50:df:02:14:49:
b5:fe:2f:52:3a:84:6f:c2:ae:d9:d1:aa:0f:a8:6b:
9f:12:59:87:f7:63:f9:5d:d9:86:c3:10:01:8e:b2:
2c:f9:7b:8f:86:12:78:19:04:67:c3:f4:6d:59:7e:
88:01:07:7d:25:85:9d:ff:84:22:5c:0a:22:d1:10:
a4:c5:5a:a7:a8:8d:4d:c2:8d:99:91:36:03:de:64:
7b:69:f5:91:cb:a9:61:73:f3:5d:d0:32:76:96:9d:
8a:50:aa:75:4a:53:23:47:d9:cd:17:50:95:f3:68:
52:f8:c4:80:ed:00:38:a4:1e:21:eb:55:f2:f9:0b:
8a:ee:36:31:f7:ac:c0:39:12:5a:93:9c:79:54:4f:
0c:95:c2:98:e9:a5:12:ba:b3:25:d6:b7:6f:ae:ef:
fb:c4:95:41:66:8f:12:04:37:48:5c:69:f3:e5:8a:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:62:98:CA:F1:99:A9:F6:CF:54:37:E4:7D:DD:2C:85:ED:6B:97
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:e1:9c:7a:18:3a:01:0c:b0:02:43:e9:b8:9e:46:8f:73:
57:24:83:be:45:ce:1a:01:65:25:38:c1:71:f4:97:ac:d1:e2:
1b:69:d5:75:a1:39:00:d5:08:b5:fc:cf:55:0d:a2:ba:a9:27:
13:d7:6f:de:80:f5:ca:4e:c9:47:ba:04:f7:89:6f:09:eb:7a:
f7:a9:0c:54:d0:b4:f1:64:5b:ab:54:43:b9:b7:04:72:b7:6f:
1b:26:8d:0c:42:74:90:44:13:33:9e:0e:b9:3e:7a:d5:dd:0d:
6d:97:92:6c:0c:91:f9:37:95:d6:0b:68:c3:c7:fa:ba:c1:68:
7c:e4:60:f4:3c:f5:89:1d:c1:a9:41:df:7c:62:cb:33:2e:6a:
7c:d3:76:55:8b:83:91:1f:75:37:32:47:c5:b9:f0:6b:bb:72:
d3:e8:5e:78:de:40:93:4f:b1:58:57:4a:58:fd:86:a3:0b:f9:
24:2d:4f:bc:80:f8:7f:5e:48:23:d4:60:af:f9:f4:33:c5:98:
87:55:8e:bc:58:28:e5:80:fb:1e:f0:da:7f:9a:eb:29:d4:d1:
65:d1:c0:ec:ef:34:54:39:89:4d:2e:59:e4:dc:5e:c2:bd:66:
f8:0e:a9:11:4d:43:e5:c4:1a:84:8b:f7:50:b8:e6:d9:5c:93:
6b:a2:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:06:46 2025 by rpki-client