Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: LIJMGwuar4f9pF/FxD7dJ7w8B2yD/xYkC8cuFoBZ0vM=
Subject key identifier: 10:BF:0B:8F:7D:26:1B:AD:42:31:78:63:2F:D2:97:5E:DC:5A:F0:29
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 0197500EE39DF5AFEF0A98CCD1F268DBA491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 05A5
Signing time: Sun 08 Jun 2025 15:00:42 +0000
Manifest this update: Sun 08 Jun 2025 15:00:42 +0000
Manifest next update: Mon 09 Jun 2025 15:00:42 +0000
Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: s5s8MkbG1rPcWimXZawDL9g7h03bwge8jOXVaQAdKHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:e3:9d:f5:af:ef:0a:98:cc:d1:f2:68:db:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Jun 8 15:00:42 2025 GMT
Not After : Jun 9 15:00:42 2025 GMT
Subject: CN=10bf0b8f7d261bad423178632fd2975edc5af029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:81:23:3d:86:83:3d:83:ba:00:55:5c:7f:
fd:28:86:ad:19:7e:09:65:b7:2f:10:52:2c:fd:9b:
e6:cc:b9:16:b2:36:09:47:76:34:cc:85:25:22:f4:
d2:80:01:80:30:3b:a5:fc:5e:de:5b:58:75:de:25:
5e:e0:8e:05:b1:a6:5f:2d:17:cd:72:2e:e2:db:92:
82:6e:30:02:bd:96:ea:81:6a:bc:5b:d7:a5:8d:e7:
a4:9f:df:34:56:c6:da:e5:a1:65:49:03:00:83:8f:
52:22:7d:73:55:6a:a6:86:ff:77:e0:64:d4:78:51:
b8:13:1e:01:c6:03:aa:08:48:98:3d:14:1f:1b:1f:
2d:ce:0f:8b:15:30:24:de:bd:79:b0:97:54:d6:3f:
f7:2c:d5:b6:c9:58:69:c2:10:ff:e5:9d:58:c8:60:
f0:4c:57:71:2c:b5:66:c7:83:30:ed:05:60:eb:31:
e1:78:68:cb:c2:90:1c:2b:ec:a6:57:4b:6b:5f:89:
1b:27:e5:9f:9f:ad:a8:9f:45:e2:f0:da:86:40:33:
1d:08:f5:ba:54:9c:0c:be:d6:2c:b4:0a:89:c5:c9:
24:94:22:76:b2:c3:6b:cc:35:d7:14:30:e0:fd:de:
8e:57:92:7a:fb:30:0f:dd:61:ed:37:b9:2f:f8:09:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:0B:8F:7D:26:1B:AD:42:31:78:63:2F:D2:97:5E:DC:5A:F0:29
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:5a:26:f6:21:36:4a:fc:93:57:53:06:db:5c:59:a4:b8:
e7:0a:6b:56:90:74:36:a9:9c:3b:01:de:47:a4:dd:b6:5f:41:
73:7b:c9:b1:7c:bd:1c:fd:b0:76:36:0c:8f:4b:3e:57:ff:75:
a2:58:e7:35:00:1a:cf:51:c1:dc:40:58:67:19:00:10:1e:0c:
34:c6:da:d1:9a:80:44:13:22:e0:3f:19:1f:dc:72:2e:74:9d:
f3:d3:c5:60:c9:e8:b9:a8:26:03:71:f3:33:e7:20:9f:e9:f2:
00:48:7f:d0:06:6f:13:af:ca:fe:c5:8e:02:fb:4f:6a:4c:6b:
3d:78:fb:c5:47:f4:36:cf:58:af:02:e7:54:2f:66:21:34:c6:
15:20:fd:ef:5b:67:7c:72:98:61:bf:dc:71:aa:c1:3a:26:41:
97:58:05:1e:0e:75:5e:07:53:3e:78:66:f7:4f:a6:98:a0:31:
d9:08:9a:e8:45:5d:14:9b:99:44:41:93:20:7b:70:2f:3a:fd:
00:a6:d6:f3:72:07:7e:8f:b1:90:87:bc:0d:50:51:0d:c8:57:
e3:c1:48:e3:58:af:a1:d7:85:da:25:bb:df:d8:b8:d8:56:97:
11:4b:6f:fe:4e:16:8f:7c:aa:99:cd:48:5c:c8:0d:ff:6f:a6:
bd:28:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:53:01 2025 by rpki-client