Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: fSK50/1Xbuz9vPjlFV/WJqiE3vKfVjIpTGsvkdpgVZk=
Subject key identifier: 5B:82:0F:20:2E:64:B8:AE:91:01:35:D7:C8:B1:FE:5C:CE:DE:DE:BF
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 0197488CC6B7671BCC66A50EDF10D110D318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0CC5
Signing time: Sat 07 Jun 2025 04:01:14 +0000
Manifest this update: Sat 07 Jun 2025 04:01:14 +0000
Manifest next update: Sun 08 Jun 2025 04:01:14 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: Bww5Le+PjsvB+rvMrC0Q6mhAIyMiwg+aeGCuOgNFc2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c6:b7:67:1b:cc:66:a5:0e:df:10:d1:10:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Jun 7 04:01:14 2025 GMT
Not After : Jun 8 04:01:14 2025 GMT
Subject: CN=5b820f202e64b8ae910135d7c8b1fe5ccededebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:75:82:39:6c:6d:d5:3c:2a:cf:9a:9d:57:
21:cf:67:2f:0a:af:11:63:73:47:40:92:72:fd:76:
be:b7:89:5d:7b:65:59:f1:d4:35:3a:bc:db:a6:55:
b2:70:30:56:fb:e7:3c:20:c5:66:82:ef:ac:25:dd:
dd:30:0c:08:cc:5d:4c:4e:73:9f:ad:fb:f3:94:3d:
a4:a3:2f:6c:58:4e:f4:3b:ce:5f:a0:c7:d5:45:d4:
e2:c3:1c:cb:bd:c6:60:eb:99:dd:99:10:7e:a7:d3:
74:d6:f7:8c:2c:20:af:73:2e:34:fe:8e:f4:62:f2:
10:bc:a0:c9:14:a2:f0:04:83:43:49:d8:f9:74:40:
17:63:b2:a2:ab:09:2d:d2:2b:ae:ea:55:f2:77:6d:
b2:8d:8d:99:98:ee:a8:83:21:8f:d2:68:71:1e:91:
f6:96:6c:e4:aa:5e:01:3d:33:f0:bc:a4:22:23:c4:
1b:0a:0a:a2:30:63:db:4a:2a:5e:05:0b:f0:a3:f8:
3b:18:7e:40:b0:f5:06:26:3e:b4:42:97:1c:de:79:
b3:41:9c:85:24:7e:1e:11:1f:45:93:88:33:9c:0f:
a4:91:f4:d9:3f:63:90:2d:cc:ea:7b:ad:67:ea:51:
e6:cd:82:42:8d:d4:42:f9:d4:c1:7e:17:ce:41:37:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:0F:20:2E:64:B8:AE:91:01:35:D7:C8:B1:FE:5C:CE:DE:DE:BF
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0c:7e:01:c1:ed:51:ad:d6:d0:08:7f:8f:0f:59:6b:f1:b2:
a4:14:94:99:d2:be:56:77:c0:d4:db:59:20:b1:2a:b1:7e:27:
1f:8d:95:ec:05:c4:d4:7a:40:ea:45:20:2b:43:5c:be:88:52:
af:ae:18:18:ec:3a:f0:ce:d2:76:f6:8b:c3:8a:46:70:99:9e:
e7:8f:8f:67:0e:05:4b:47:05:ce:a4:9b:e1:81:47:f7:eb:ee:
b1:cb:c3:1c:79:6a:3c:c0:f4:a3:8f:b6:83:37:66:2d:8a:f5:
b6:c7:c7:5f:bd:0e:67:b8:e0:32:5b:5d:4e:41:3c:eb:6e:e8:
1d:25:f8:a6:00:ce:0d:d8:28:67:26:d7:48:f2:6f:46:4a:4d:
c7:b8:4e:12:89:52:5e:2c:04:3b:58:53:b5:e4:d9:98:48:ea:
65:a6:bd:a8:93:d4:52:f8:b5:d6:e5:8d:93:c0:50:ff:2e:02:
bb:be:48:c1:43:01:cc:11:40:08:55:a0:b9:5e:38:c0:c1:4c:
59:db:c0:ce:21:d7:be:b1:c6:61:80:e8:5c:b7:d4:c1:ef:ca:
62:d6:47:48:f8:41:c2:3b:32:14:b4:40:c3:10:52:50:9c:ee:
b0:98:34:cd:3e:fc:f0:6d:cc:77:ed:93:ec:68:6c:33:45:45:
db:1f:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:15 2025 by rpki-client