Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: HdrzrX/TA/8c+1L19CpYkLTkSLWjDuRpEneY27I8lHI=
Subject key identifier: 1F:61:09:04:46:84:57:22:DB:FA:BC:48:99:1E:F1:D0:5A:96:B9:86
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 01974779BC2B57CA955686AA99595D4C7E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:49 +0000
Manifest this update: Fri 06 Jun 2025 23:00:49 +0000
Manifest next update: Sat 07 Jun 2025 23:00:49 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: +jXoxiAEyb+V6A+VuRSLGEDfsvqCMvXdNqqLNwb/3E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:bc:2b:57:ca:95:56:86:aa:99:59:5d:4c:7e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Jun 6 23:00:49 2025 GMT
Not After : Jun 7 23:00:49 2025 GMT
Subject: CN=1f61090446845722dbfabc48991ef1d05a96b986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:28:49:94:f8:67:24:df:f1:97:92:48:9c:
09:fc:7f:31:2d:60:23:f0:de:07:23:be:7a:34:97:
1a:20:7b:59:12:d1:e6:4c:e3:8e:0e:4a:d2:79:d7:
1e:da:61:7d:0f:14:91:b9:0f:7d:4c:7b:b3:66:ae:
c7:c4:5f:d4:33:71:bf:7c:04:b3:ce:36:b1:87:75:
9c:10:62:f2:2d:32:70:23:45:b4:db:7d:af:7a:dd:
cc:b0:f0:04:74:80:8a:0d:b2:86:ca:de:83:53:89:
95:bc:2a:68:e0:bd:ec:c2:18:b1:75:5f:2b:ab:06:
b5:9e:6f:21:6a:71:0c:e8:69:0f:f5:a1:b4:7d:06:
92:01:9e:92:10:d4:dc:12:32:03:a5:5a:ad:1f:91:
b3:56:07:f5:07:23:44:b9:05:ff:5e:c5:82:40:1b:
f3:f1:27:4b:32:ff:aa:c3:5c:8f:70:e9:11:a8:57:
4e:73:2d:b2:a1:76:2e:6d:81:58:b5:6b:e4:97:0a:
31:f9:5d:e8:b4:d3:cc:33:98:d3:1e:f1:06:84:05:
b4:24:d4:9c:f3:f6:59:ea:04:b3:65:77:5a:c5:c6:
48:4d:f4:e5:6c:aa:82:22:59:c1:18:d7:05:4c:3f:
7e:95:44:df:de:05:1f:6f:e1:88:ab:d5:83:eb:c4:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:09:04:46:84:57:22:DB:FA:BC:48:99:1E:F1:D0:5A:96:B9:86
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:46:27:a6:b2:ad:4c:ef:23:bf:f8:b9:89:3b:dc:48:77:9e:
94:96:6e:e2:58:db:46:27:b4:d6:d9:78:73:fb:36:36:91:ed:
0f:84:1f:9d:82:09:51:05:e2:2d:c0:a6:a5:cd:36:29:23:f9:
5b:92:8c:3b:8f:2e:21:d9:36:f2:8d:fb:32:ca:a8:4c:98:89:
b6:72:82:14:3d:ce:fa:61:28:69:26:83:33:47:c6:89:85:e5:
27:d3:25:9d:2c:5b:38:ac:46:b9:25:71:56:be:e3:3f:ce:cc:
48:d5:58:f5:10:b5:2b:a9:1f:9b:9d:91:db:99:e9:02:7a:56:
ee:fc:66:a3:06:92:51:43:4b:77:21:8d:4a:04:7f:8d:60:23:
31:d8:7d:af:95:55:a7:a6:a4:ff:5f:1d:67:e9:94:59:3c:e2:
6b:20:c9:54:6a:d0:91:93:f2:f5:28:98:76:fa:0d:30:07:4c:
fa:b5:3c:f9:b5:f7:d7:c5:9f:c4:9b:19:cf:1c:99:fb:32:f3:
89:c3:c5:d4:ce:6c:5f:6e:8c:43:9c:0f:3a:87:c5:0a:c0:b4:
1a:e3:91:db:8f:9b:37:23:1e:7f:66:7f:d4:74:f4:40:46:92:
3f:23:5f:8a:26:6d:c0:1c:f8:47:40:2f:c2:0e:6e:91:52:89:
79:3d:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:58:58 2025 by rpki-client