Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: I5kobCUaiYWByOIuDfnqtg2ufJMqLyCZZVbnVWl3Dz4=
Subject key identifier: 69:21:B5:26:5C:78:17:6B:D6:2D:3D:81:2B:2E:BC:F8:4C:BF:1C:C4
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019748FA02693B8EBB1B7AEA525D876F28C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: AfS0iGZSwyWNVwJsrDH11x27viALZM1zo5lquU1aXvQ=)
2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:02:69:3b:8e:bb:1b:7a:ea:52:5d:87:6f:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=6921b5265c78176bd62d3d812b2ebcf84cbf1cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:4c:82:50:34:6a:b6:b1:04:bf:18:5c:fb:
6a:5d:39:f9:e3:7f:cb:fa:d9:ea:db:23:9b:c4:25:
04:df:47:b9:f0:40:e3:06:27:1d:74:22:48:fd:70:
44:c4:a9:1e:f8:52:aa:66:dd:02:3c:b3:b0:df:cd:
2e:d3:1d:13:3d:b6:3d:f8:bb:6c:a1:34:20:eb:8a:
bc:6e:de:4d:13:26:84:8b:51:ad:33:6e:77:b1:c7:
82:fc:40:ea:16:af:37:a6:fe:eb:2c:be:67:2d:97:
12:26:0d:21:84:87:b4:53:e0:4b:0b:58:a8:d5:d5:
f2:b2:e8:58:88:4d:89:ac:ab:d6:f2:f8:ed:f2:6a:
c3:a0:89:77:59:24:cc:7a:be:8b:23:89:53:3c:2d:
ce:28:b3:8d:4d:5c:ea:8b:b7:05:15:31:8f:ad:8b:
11:0f:b0:3c:b1:e1:c8:7c:06:79:37:4f:83:3e:c6:
cf:e8:a0:6c:b4:67:40:bd:62:ca:b7:e1:e3:c4:46:
56:ed:67:60:d0:0c:77:6a:3b:10:fb:a0:3f:84:60:
a9:9e:78:5b:67:30:8b:74:49:7a:cd:7f:61:6a:cf:
cf:4b:a4:28:b3:66:9e:3b:d2:4e:7c:10:bd:03:45:
46:46:77:f4:5e:47:5a:72:39:05:c2:03:8e:23:55:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:B5:26:5C:78:17:6B:D6:2D:3D:81:2B:2E:BC:F8:4C:BF:1C:C4
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2f:1c:6b:01:75:0a:f7:b5:3f:5b:3e:c8:b2:c2:8e:ac:69:
78:11:0b:cb:9e:d5:06:d2:6c:a9:82:4c:e0:c0:9c:a1:46:b8:
71:58:25:3d:8f:75:e6:33:28:74:44:c3:52:73:f1:ea:df:f9:
cc:1c:34:7c:9f:26:6a:ba:be:ee:f1:62:51:ef:16:ce:70:18:
4f:70:51:78:af:82:17:fc:05:6d:32:ab:a7:40:d6:01:db:eb:
fb:73:9e:d0:43:30:28:d1:29:62:42:d8:93:52:2e:80:04:c7:
01:c1:e6:5f:e8:27:1a:fc:9e:ce:64:0a:d1:c8:46:44:b7:4c:
ab:fd:c3:0e:0a:03:47:d1:e7:b8:c0:dd:48:3f:2d:3d:47:71:
00:21:b2:c7:3b:5d:b3:6b:da:ee:49:b9:69:58:f0:86:14:f3:
25:f8:69:ec:dc:0c:af:96:7e:88:76:9e:bd:4a:03:d1:aa:fb:
46:5a:67:4b:4c:78:d9:0f:a0:8a:67:57:cc:06:76:2c:f7:14:
cc:c8:cf:6a:42:8d:9f:5b:ce:59:07:cd:76:e0:5e:5e:09:2a:
41:5c:ed:dd:b4:73:b3:bc:f6:ef:96:bd:94:82:1d:da:1d:5c:
c0:fa:6d:71:e4:8b:df:6b:dc:c3:eb:1f:46:ce:4a:7b:55:4b:
aa:31:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:15 2025 by rpki-client