Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: I65pdoglKKEFd5NlUiMIRXdMlVQF+GDpCqrMkpx50+A=
Subject key identifier: C9:08:30:7D:75:62:AE:5E:7A:E1:3E:40:20:19:B2:48:2B:4C:BC:1B
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 01974CA00DED34B8C5677C6BA010D0A9034B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 02F5
Signing time: Sat 07 Jun 2025 23:00:47 +0000
Manifest this update: Sat 07 Jun 2025 23:00:47 +0000
Manifest next update: Sun 08 Jun 2025 23:00:47 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: 7/31NjUP3INe4x23Y9ns8rfI/66FSK9pj3vm4yp9JBU=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:0d:ed:34:b8:c5:67:7c:6b:a0:10:d0:a9:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Jun 7 23:00:47 2025 GMT
Not After : Jun 8 23:00:47 2025 GMT
Subject: CN=c908307d7562ae5e7ae13e402019b2482b4cbc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:1c:af:e2:bc:6c:9c:fd:98:38:67:b3:8b:
69:2c:d1:ae:d9:23:b3:f5:c9:fe:c9:4a:98:b3:3e:
e4:e6:a9:f8:90:9a:dd:f8:20:01:db:25:56:5e:c3:
73:26:57:07:ab:09:a4:ed:a3:70:34:2c:d3:7b:4e:
cc:7e:9e:56:11:4f:9c:0e:88:3d:c6:ed:33:94:1f:
ff:30:72:7e:3f:68:e3:64:d4:65:21:e1:a4:96:43:
f1:60:d0:9f:ac:db:8b:a4:84:b3:54:24:83:21:28:
f1:06:a2:94:c1:18:65:83:be:08:dd:3f:2e:7b:4a:
27:33:e9:87:2b:d7:fe:86:95:50:30:7f:81:61:4d:
40:ba:b5:a0:14:ed:d7:70:6e:b5:d8:5f:c5:9a:14:
b8:1c:97:93:9f:dc:c3:03:fa:0e:74:79:33:5c:b3:
04:77:35:99:9b:79:0b:1b:12:e3:ba:cd:b6:6e:40:
f4:af:28:51:2b:65:99:30:0c:f2:d7:17:42:1a:b3:
3a:6c:c3:1e:9c:66:c8:19:0a:c7:2e:cf:06:94:13:
f6:4d:18:14:1b:59:71:74:cf:39:8c:08:a3:e6:b7:
fc:66:04:6b:b1:c2:9e:64:99:47:e5:7e:e1:f0:00:
10:32:93:cf:37:bd:dc:21:2d:e9:4f:ac:c0:41:19:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:30:7D:75:62:AE:5E:7A:E1:3E:40:20:19:B2:48:2B:4C:BC:1B
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:5f:3a:8e:8e:ab:8f:87:4d:91:19:87:bb:c4:7f:5e:92:
00:cb:31:b6:8f:51:76:dd:fc:f5:38:5d:21:91:8d:7e:47:d9:
48:41:94:79:35:07:82:57:71:c6:76:88:3a:ba:b1:19:6c:34:
6e:e8:88:1c:90:20:24:18:9a:ba:9e:af:b2:03:9f:50:e9:92:
dd:4e:fe:4c:a2:a7:95:10:d5:dc:68:04:f5:ad:68:2b:54:c3:
32:8b:86:75:80:75:75:b4:f1:85:d4:ce:0b:df:79:8b:7a:19:
73:c6:35:f5:e0:2a:9e:64:31:b1:8c:11:36:33:66:da:d9:32:
99:a7:63:1a:ad:75:4f:e9:ee:14:1b:0a:8e:8f:b2:73:c7:0f:
c7:e3:e2:ca:56:f9:8d:ad:9d:15:ba:42:f8:c6:b3:d0:6c:11:
21:91:3a:ba:7e:fc:4d:67:32:49:a6:e0:c3:21:39:f2:d6:6c:
44:1f:ef:97:9d:22:bb:4c:43:9f:aa:c2:cb:1e:2d:13:6e:a4:
8c:a0:01:48:bb:34:26:aa:ea:d9:1c:d7:f7:1d:05:a5:61:1a:
03:87:a0:41:d1:93:58:74:88:7d:12:3d:41:6e:69:72:70:ba:
ae:1d:d2:be:3c:06:36:cc:c3:27:ad:a1:1f:5b:b5:d7:ec:7a:
9f:76:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:00 2025 by rpki-client