Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: lFCCeFPLUgvvBhoeYTdSbjPZiYokMZ6wbv5Qfr7D+/o=
Subject key identifier: 43:D4:48:FA:E2:3C:55:EA:97:C3:BA:96:C9:81:75:F7:0F:91:B0:D5
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 01974FD7B7A9514C2A3D05D1430E4C4E6B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 0517
Signing time: Sun 08 Jun 2025 14:00:26 +0000
Manifest this update: Sun 08 Jun 2025 14:00:26 +0000
Manifest next update: Mon 09 Jun 2025 14:00:26 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: 3sQ5SzgRjVAGO2EuuKo4RGuoxun1pZWrU3thEy9Gnng=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b7:a9:51:4c:2a:3d:05:d1:43:0e:4c:4e:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jun 8 14:00:26 2025 GMT
Not After : Jun 9 14:00:26 2025 GMT
Subject: CN=43d448fae23c55ea97c3ba96c98175f70f91b0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:f4:1b:f8:7c:b0:e3:3a:b6:cf:f9:1f:20:
82:cb:c4:df:6a:cc:33:53:26:74:b3:1b:29:a0:c9:
92:2f:47:bf:fc:26:c6:75:40:88:d5:1f:b7:d6:9e:
58:5c:ce:9d:ee:a4:e0:63:f5:20:5a:36:9d:8d:1a:
7a:29:ba:af:37:1f:a1:15:ce:d4:63:8b:16:07:22:
f7:d7:a8:a5:7b:04:d9:0e:34:2f:76:86:5b:66:02:
b6:ec:29:d6:61:ab:e2:77:bf:fa:c8:14:80:7f:ac:
61:d8:b2:58:13:75:06:b3:05:7b:b0:ca:d8:2f:ce:
17:a4:69:67:e8:f9:0b:59:a0:eb:43:71:f6:ae:5d:
00:8d:c0:48:6c:b1:8d:6d:52:5a:0b:c8:ef:1a:40:
bf:4c:4b:05:96:24:e7:92:c0:f7:94:ab:1c:21:13:
ef:1e:2c:00:83:b6:a9:32:b5:1f:07:6d:93:21:50:
58:f9:c4:58:eb:37:f4:4d:c3:31:96:fd:99:2a:16:
ce:f2:84:d8:b2:e2:b5:0a:5a:fa:18:a7:12:5b:2d:
78:0a:6c:ac:ca:ec:23:29:75:96:55:59:90:26:d4:
33:75:45:03:67:58:8c:be:f2:44:77:f0:f9:e2:8c:
6e:66:a7:61:b7:d8:2e:66:c6:0b:c6:62:ab:b9:ce:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:48:FA:E2:3C:55:EA:97:C3:BA:96:C9:81:75:F7:0F:91:B0:D5
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:63:6c:70:3e:12:e0:ba:07:ee:df:45:0c:e1:4d:5f:c4:8b:
b3:32:15:b6:83:5b:d7:19:d7:2c:c2:40:4a:15:e2:e8:27:dc:
60:fc:98:98:8f:be:4f:b6:dd:60:f1:1a:09:95:fc:80:0f:69:
0b:41:4b:83:44:ae:2d:63:dd:57:10:56:0a:fd:30:61:6c:98:
f3:25:ac:3b:3b:92:0c:0f:d5:4a:6d:1d:63:ec:6c:f7:f1:70:
aa:21:f5:92:a1:7f:31:9a:3d:12:03:0a:ee:e3:49:64:0e:6e:
c4:93:fa:da:22:e5:92:6a:a8:2b:b3:6f:a4:be:a9:b8:2c:0c:
b2:57:84:fc:9d:2a:66:32:13:03:60:67:96:81:1f:66:a4:82:
5a:52:51:1b:5f:cf:78:f8:f7:66:ac:7d:77:64:71:3a:3c:2c:
80:11:e6:88:a3:76:21:6f:c0:a6:ce:73:e4:b4:33:7c:22:c9:
be:16:2b:3c:8a:5a:da:a6:22:4b:44:ff:5e:a8:a0:5e:a0:0c:
44:f9:db:ac:b6:9c:49:30:93:c0:49:8b:a9:bf:8a:45:64:bc:
9d:b4:31:40:b2:0f:97:44:c0:f6:89:6d:a9:6d:00:01:be:2f:
00:32:d4:49:1f:90:b7:c3:8f:a0:13:b8:48:4e:70:bb:47:b6:
67:3e:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:34:19 2025 by rpki-client