Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: PQuYaKcb5JLJXeaXz6Fo3Uc6yl+Mtekux45a0PEMO3U=
Subject key identifier: 1B:4A:5E:F5:37:62:61:E7:BE:1A:6B:B1:45:91:76:71:7F:5D:06:7D
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 01975E38A43A1346CE52E9C8794815821B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 10CB
Signing time: Wed 11 Jun 2025 09:00:59 +0000
Manifest this update: Wed 11 Jun 2025 09:00:59 +0000
Manifest next update: Thu 12 Jun 2025 09:00:59 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: oe4Vq3/hJENI9PFhPJLo3F/s81lUlVNcPRcamiRbA+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:a4:3a:13:46:ce:52:e9:c8:79:48:15:82:1b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Jun 11 09:00:59 2025 GMT
Not After : Jun 12 09:00:59 2025 GMT
Subject: CN=1b4a5ef5376261e7be1a6bb1459176717f5d067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:e6:d6:d3:81:a0:5b:ef:ea:d0:76:87:03:
e9:73:e9:8d:f6:40:20:fd:58:3c:58:16:49:b5:7f:
3c:63:19:18:17:ec:55:2c:a7:8b:5e:40:79:39:f4:
24:4b:a2:ed:42:40:35:db:1d:11:6a:52:a6:4e:7a:
e5:4d:ff:ff:28:e5:d6:7e:84:9a:af:89:e8:fc:cb:
83:79:ad:2a:75:a0:8e:79:20:58:41:2e:32:ac:b5:
94:f5:5c:1f:4f:16:70:41:d5:42:6b:39:e4:50:db:
5e:53:fa:8f:b7:60:4f:d9:b8:5b:92:c7:3c:d1:c5:
9a:14:3b:29:ef:d0:2a:58:fb:b9:f0:38:10:92:fa:
d2:c7:f3:6f:4b:66:7c:d5:f1:15:4c:9f:6e:4d:b9:
a0:15:8d:ee:42:fd:1b:1a:c5:af:65:4a:bb:8e:78:
4b:bc:39:95:86:66:30:0e:61:e7:0b:d1:a3:cd:8e:
70:92:56:f9:bd:81:4f:95:c4:a4:50:3d:c4:71:5c:
c3:f5:53:07:fd:40:b3:2b:a3:0c:b4:fa:37:2e:16:
cd:53:e9:d4:59:ef:f9:16:ae:44:28:70:38:2e:4b:
fd:25:be:4d:ca:a5:73:d9:20:92:a5:20:76:e0:0f:
ba:58:dd:95:8b:3e:97:6a:9b:a5:61:9a:e4:dc:c9:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:5E:F5:37:62:61:E7:BE:1A:6B:B1:45:91:76:71:7F:5D:06:7D
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:89:fd:75:c2:98:49:b0:53:fc:8d:7d:31:76:32:4a:8c:28:
4f:bc:ac:9d:df:d5:2d:9f:1c:3b:ad:6c:b7:27:ab:03:cd:4a:
f1:37:6c:83:3e:5f:0f:72:51:cf:28:e7:44:c5:9c:35:bc:0d:
dc:c7:a4:d1:09:08:f9:ab:67:dc:10:99:24:8c:2c:fd:30:fe:
b8:23:4d:80:cc:25:5a:d1:84:29:c1:63:cf:67:5f:f0:bd:6a:
7b:f2:4d:96:22:ad:e0:07:b0:4d:23:8f:60:18:c9:f8:1e:fc:
65:a8:2d:10:45:bb:f9:72:15:46:7b:de:91:53:0a:7e:34:53:
92:66:ac:5d:0e:b2:40:2b:e1:47:54:ab:91:2e:88:fe:26:20:
a7:64:83:ca:81:b8:c2:e9:32:35:1f:1f:a0:97:2b:69:30:08:
60:9b:84:85:17:af:02:6c:c0:62:9e:88:c4:15:a1:f5:64:98:
9e:48:46:32:82:9a:b6:2c:76:ee:52:89:e5:59:51:60:d8:28:
42:dd:25:19:d9:26:48:98:6e:c8:f2:f8:4d:86:36:e3:2d:75:
b4:ed:f2:43:00:22:ad:b1:2c:b1:b6:a8:9c:43:ca:4e:3c:20:
12:c2:3c:c0:67:3f:3b:f0:73:d9:cf:d0:6d:ab:02:02:4f:0c:
39:c5:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:08:18 2025 by rpki-client