Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: V9fXIGohSqpm275X6GGz34nwsi8jDo6xEFIH5VvxzEg=
Subject key identifier: 65:10:B1:21:45:95:3F:8A:65:B1:0D:B9:E1:47:24:B9:1D:1D:D6:04
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 01975CB8254C251FC5259F0301E39EBDF85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 02:01:01 +0000
Manifest this update: Wed 11 Jun 2025 02:01:01 +0000
Manifest next update: Thu 12 Jun 2025 02:01:01 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: Wf+2d2dH50Z3io2P8ldBW1I+slirLZq8CeodSWITDOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:25:4c:25:1f:c5:25:9f:03:01:e3:9e:bd:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jun 11 02:01:01 2025 GMT
Not After : Jun 12 02:01:01 2025 GMT
Subject: CN=6510b12145953f8a65b10db9e14724b91d1dd604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:21:57:07:2f:49:96:95:c4:a6:df:b7:c2:
47:43:6e:f4:60:1d:6f:68:aa:c1:5c:64:1a:a1:99:
3b:90:ca:57:c4:f7:5e:f8:fa:bc:ac:99:f1:c7:38:
8d:2c:9d:cc:7d:09:1b:6f:4c:0a:92:83:0a:e7:3a:
d4:e2:5b:7b:a7:fe:b2:08:98:51:8f:fe:48:da:36:
65:ec:4f:30:73:77:9d:1d:8a:a6:d7:73:44:07:e0:
b3:90:91:f0:28:e6:62:75:90:41:ef:16:44:ea:f6:
61:e7:a6:ab:01:d1:df:99:9c:6d:9a:a6:7c:d3:a5:
ae:19:66:69:1e:01:61:d0:27:4b:10:bb:0c:be:98:
29:b5:87:63:bd:05:9e:f5:5a:ba:c9:48:df:4f:3e:
bb:7c:fe:a0:21:d9:4e:9b:d4:2c:e2:ac:b8:b3:9a:
b7:23:f0:7a:16:ca:fa:9d:d4:3f:55:92:c5:aa:62:
28:3c:c1:d3:20:3f:be:3d:b0:69:f3:c5:08:92:b7:
d1:f2:b3:a0:2d:37:72:a1:e4:21:f3:ec:7c:a2:a2:
47:22:83:30:43:73:51:ee:4c:f4:ec:73:61:56:09:
52:37:ec:79:16:1e:e7:05:39:0c:f3:09:d8:f0:58:
19:77:f6:b8:e7:9c:91:4c:12:ec:0c:25:68:79:1b:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:B1:21:45:95:3F:8A:65:B1:0D:B9:E1:47:24:B9:1D:1D:D6:04
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ad:1f:de:b3:d7:74:0b:60:06:f7:97:7b:b6:ca:80:0d:29:
89:4b:3b:12:de:5d:2d:fa:20:55:e6:21:b5:3a:15:44:a7:bb:
94:54:e4:5b:ad:8b:83:ba:48:a9:21:46:f1:ec:b8:62:f4:7c:
9d:17:95:05:ce:23:9f:c7:d5:71:12:64:09:20:f2:a3:e7:c5:
0e:64:c6:77:e5:4f:00:48:91:ad:cc:77:30:1f:67:c4:2c:92:
88:1a:81:6d:99:fd:32:5f:cf:b8:58:9e:b1:f4:5a:24:ee:df:
e2:8f:14:ef:be:36:0a:fb:df:96:bf:fb:79:8f:c9:21:a0:9d:
93:9d:c7:4a:08:8b:76:1a:12:b0:a0:70:90:bf:22:f8:70:a8:
15:db:80:98:6f:bb:39:f4:cc:c5:6d:f7:27:31:06:4b:b3:ff:
1c:55:44:a3:67:2e:78:96:df:2d:44:d4:95:23:9f:0e:64:06:
b0:ab:86:08:9c:51:dd:51:f9:d8:1e:f0:c3:bc:8f:e7:99:d3:
74:7c:f1:6d:68:45:f9:6b:cc:a4:18:d0:0b:ee:b3:0a:40:a7:
fd:f1:de:91:57:2c:a1:09:f3:b7:f6:79:53:65:f6:23:21:35:
8f:f2:28:2a:64:c7:cd:a2:44:a3:ab:d7:df:41:df:f4:e7:c9:
c2:19:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:14:08 2025 by rpki-client