Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: obtxg6GJ6EjUOGlUf5yurTM2R9SQwYaauXBLyvlDbTU=
Subject key identifier: 4E:FB:49:B2:7A:C3:85:DF:C0:83:94:3C:AB:EC:19:F3:45:4E:81:D7
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 0197531067FA02D6F6E2404A06D34525935F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 05:01:13 +0000
Manifest this update: Mon 09 Jun 2025 05:01:13 +0000
Manifest next update: Tue 10 Jun 2025 05:01:13 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: p5St9QZyPG4VwQLw6fifNFd0sLWCgjayXBzciX+sfxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:67:fa:02:d6:f6:e2:40:4a:06:d3:45:25:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jun 9 05:01:13 2025 GMT
Not After : Jun 10 05:01:13 2025 GMT
Subject: CN=4efb49b27ac385dfc083943cabec19f3454e81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:f3:b8:e5:e0:c4:70:8b:0c:70:bc:f2:67:
32:f0:94:03:a2:3f:db:e7:22:b8:d0:0b:e6:e8:94:
ea:a9:dd:e3:1a:fd:60:91:4e:26:a7:ec:02:75:06:
43:98:d4:6b:61:9e:89:fb:3f:fa:6e:c7:e9:22:c2:
1a:5e:09:2c:3d:40:28:9c:d2:86:fc:45:b7:ce:d3:
fb:ea:a2:45:6c:d2:7f:dc:c4:4e:da:41:1d:59:d9:
48:c1:a1:42:a1:c4:a9:d2:a2:f4:ec:c0:09:d2:86:
be:32:25:60:81:db:12:4e:72:9d:fa:92:4e:48:d7:
f9:37:18:aa:cd:11:e0:68:5e:18:a1:68:33:fd:8d:
c2:22:30:43:d5:6f:70:dd:2c:6e:ff:90:37:9b:04:
d0:cd:fa:56:89:ee:51:3e:a9:8c:1a:5f:15:67:b6:
8c:63:e9:31:69:bd:50:e0:b0:3f:92:15:36:0f:60:
fa:2b:aa:be:9d:45:e8:94:0b:20:ae:20:6f:a0:2e:
8d:49:40:d1:26:15:9d:ac:8e:ec:ec:29:2c:10:19:
23:1f:a2:4d:4f:ee:3e:7b:02:4f:64:d0:77:cf:f0:
42:7a:b3:74:5d:a5:44:47:cc:c7:72:18:54:3c:49:
68:2b:e7:dc:b1:a2:28:f4:7f:4a:a1:c2:3f:21:44:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:49:B2:7A:C3:85:DF:C0:83:94:3C:AB:EC:19:F3:45:4E:81:D7
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:7f:76:0c:96:db:19:bb:8c:f4:36:f7:60:5a:bf:f1:d1:
e7:79:bc:39:a7:a2:54:e3:1e:9e:6b:b0:46:86:ea:e8:23:d1:
55:e1:0a:e1:52:f3:2e:74:4a:ac:9c:88:55:7f:d8:0f:88:99:
33:fa:ad:36:af:6d:9c:c1:26:10:33:2f:49:74:5d:31:d0:75:
44:37:71:eb:64:22:38:7c:31:ce:2e:b2:44:7c:f1:0f:ff:7b:
1d:f0:cd:50:55:dc:46:d6:2f:5b:27:86:92:bf:bc:09:43:5d:
bd:5b:0a:8b:e8:0a:71:c0:85:ed:0b:76:9e:16:e2:fb:e4:41:
cb:27:1e:fa:d4:0f:7c:b8:ad:ab:de:cf:bf:f0:67:cc:c1:e5:
7e:7a:03:34:e8:73:22:c4:96:e2:59:1c:ad:1a:4f:19:0a:90:
47:47:89:a1:84:f6:03:68:ca:de:29:ca:60:da:c3:64:d0:4d:
96:4d:cd:7f:b5:ff:06:cc:4c:66:f2:c6:69:a0:86:45:0b:23:
5f:a6:2c:21:c1:c2:c0:9e:87:05:e6:77:ca:ce:cd:b4:2d:2e:
87:7d:aa:e2:79:d5:38:e9:d1:cd:31:6a:6b:6c:48:59:27:90:
ef:c8:69:3d:dd:bb:80:cb:93:a5:b8:bd:d2:07:07:3c:91:66:
f6:e6:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:56 2025 by rpki-client