Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: RuYGFaD0VtifAUQb1wyF4L0gfGgUJgPPX/yGf2UmW3Q=
Subject key identifier: 7C:46:0B:23:0D:28:1C:B7:FD:DB:73:C6:D4:84:4F:A5:95:D6:F3:F2
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 01976C2A96877D743649A67C8338F17858B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:00:19 +0000
Manifest this update: Sat 14 Jun 2025 02:00:19 +0000
Manifest next update: Sun 15 Jun 2025 02:00:19 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: 7rWACSXjmV4T7qhVetFbjmzq0Xn/P9pvWtEpXRRDjPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:96:87:7d:74:36:49:a6:7c:83:38:f1:78:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jun 14 02:00:19 2025 GMT
Not After : Jun 15 02:00:19 2025 GMT
Subject: CN=7c460b230d281cb7fddb73c6d4844fa595d6f3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:6c:d0:57:00:30:02:be:5b:a9:32:9e:f5:
dc:c3:66:b1:53:3f:45:52:13:40:00:12:4b:29:3f:
bf:ff:42:a2:74:32:68:fb:b4:6c:4b:81:b2:5e:4b:
09:d6:cf:2c:03:91:3d:eb:78:6c:bf:e0:f0:65:6d:
a0:c5:34:67:b6:56:6e:01:de:d5:7c:fc:69:a1:73:
10:99:4d:c5:1e:2f:4e:0a:f8:f9:da:74:a1:68:52:
ed:7b:e9:ac:a9:fd:6f:ef:46:a5:de:e4:77:36:8a:
52:7d:46:8f:57:5b:49:26:fb:76:de:5a:2f:5d:2f:
32:21:b8:92:b1:de:96:3b:9d:87:ef:e0:d6:8f:51:
cc:f3:a1:7a:33:ae:eb:67:05:03:a8:91:ea:eb:83:
ed:2e:b1:65:d9:66:a1:29:7a:e6:ec:71:85:a4:98:
3d:a9:b6:ec:08:f9:c0:a6:ca:72:09:41:dc:5b:45:
a7:92:eb:97:16:9b:2f:bd:47:ba:73:ad:14:a1:3d:
3c:aa:80:42:a2:04:8e:0c:f8:4c:c4:d8:1e:d2:1a:
d1:b6:c3:a2:16:fa:a8:d0:71:67:f9:41:6d:72:fa:
c0:82:dd:47:57:af:41:78:b4:db:08:80:7a:a1:14:
15:05:d2:7b:49:fe:29:28:d4:86:d3:9a:76:33:84:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:0B:23:0D:28:1C:B7:FD:DB:73:C6:D4:84:4F:A5:95:D6:F3:F2
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fb:32:2e:df:58:3e:57:bb:2a:e7:be:98:14:a7:bb:56:b6:
35:6c:06:85:74:5f:68:1e:bb:94:a1:96:1a:3d:af:00:37:af:
94:59:94:5a:0f:bb:7d:34:7d:75:38:2d:30:a2:10:fb:4b:3f:
e7:e1:93:f0:3a:fe:4a:cd:05:0d:a9:ec:dc:d1:bb:34:09:76:
29:70:c3:9e:00:16:93:0e:cb:e5:c1:a5:32:db:8d:04:19:70:
de:62:99:b6:ca:73:18:df:18:45:8f:c8:8b:c1:e8:78:6d:9a:
19:94:6a:c6:89:6f:b6:e1:93:a1:61:e1:5b:c5:d5:85:97:fb:
26:0f:0a:3f:9c:07:c5:32:56:38:6f:35:16:d1:47:96:5a:4c:
18:04:15:43:e8:52:13:51:93:3e:44:aa:b1:66:c9:11:df:49:
05:64:2a:d2:ca:16:d6:32:6f:ca:f6:51:17:a7:3a:18:1c:64:
95:ac:35:1e:9e:69:f1:8a:45:ce:f9:e2:d5:68:50:2d:96:e3:
69:64:21:85:41:23:93:f4:2c:ac:29:0f:a6:c3:8e:4a:f0:08:
8a:d7:73:c5:35:b4:7c:73:8b:c1:b8:3b:90:c7:20:81:ac:69:
ba:b9:d1:5d:e3:27:81:77:57:b2:ca:08:e2:b7:18:35:d1:dd:
e6:87:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:36:50 2025 by rpki-client