Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: kYGXIKn7du/dbuGMynjgA7h6FXKs2p7B2z4Bh1rbFM4=
Subject key identifier: E9:22:16:78:EB:22:CA:56:73:BD:19:1D:ED:C7:92:BE:6E:B6:7D:32
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 0197CC8352305F94CFA9F53383D9E39564F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 0611
Signing time: Wed 02 Jul 2025 19:00:47 +0000
Manifest this update: Wed 02 Jul 2025 19:00:47 +0000
Manifest next update: Thu 03 Jul 2025 19:00:47 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: L6rDSHntbTtlZtKDnaeNlzf91pwigBahmYipT+eAj0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:52:30:5f:94:cf:a9:f5:33:83:d9:e3:95:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Jul 2 19:00:47 2025 GMT
Not After : Jul 3 19:00:47 2025 GMT
Subject: CN=e9221678eb22ca5673bd191dedc792be6eb67d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:02:56:10:91:e6:4f:6f:2d:da:12:3b:fc:
07:8d:1b:cb:9b:c1:d4:6e:fb:34:73:8b:5a:3a:79:
9b:31:03:e5:5a:c7:5a:b9:72:15:21:c4:64:ad:09:
9b:3a:cc:e7:f6:ab:28:ee:ec:2f:56:7e:51:7e:23:
61:67:db:03:23:87:7a:e8:60:14:aa:e2:9a:8f:5a:
d1:2b:98:91:bf:5b:41:0a:a3:2f:ef:8c:06:31:9a:
e1:56:f4:34:82:9f:f7:cf:f6:35:fa:82:b3:52:15:
4f:0b:40:0f:77:f2:c6:c5:b8:be:e0:4f:0b:e2:de:
c5:8f:ef:2f:ac:3f:67:84:ff:03:28:15:83:ca:e0:
aa:90:10:2b:16:f7:75:7c:38:e6:70:68:e0:86:e6:
ed:51:90:44:43:6a:f5:49:b4:f8:14:f1:b1:00:18:
d2:81:bb:60:4a:03:39:29:64:b0:9d:9d:ab:20:c0:
75:b6:59:76:df:e4:d3:3a:40:67:d2:d3:bf:ef:4d:
5f:22:75:b0:51:d7:b3:14:3c:10:d7:fb:17:80:e3:
87:f1:53:47:e8:1f:f2:86:f5:2d:3a:02:3c:b6:4e:
de:d5:02:54:4a:7e:2f:04:8f:f7:6e:46:a7:0b:23:
aa:2c:46:b1:f7:88:53:58:fc:2f:fa:9a:24:74:3c:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:16:78:EB:22:CA:56:73:BD:19:1D:ED:C7:92:BE:6E:B6:7D:32
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:43:22:43:a6:27:6c:67:02:7b:2b:c2:ef:b2:7a:f8:62:07:
8d:99:b3:c8:5b:a7:ec:5b:1d:97:60:5a:4a:29:50:20:49:24:
9b:4f:ae:f8:4b:62:1b:d5:08:35:9f:22:a2:12:4d:f6:e0:15:
b3:91:11:de:ed:7b:4c:e5:62:ca:33:39:8e:30:2a:47:89:a7:
6a:14:a8:d0:4d:62:7c:0a:6b:98:cc:d0:1b:f1:d7:f6:86:83:
50:31:23:ce:d0:63:ee:a5:90:eb:5c:5e:e9:c6:9c:c7:c9:58:
d1:d0:d7:aa:56:cd:91:ec:f5:f6:70:33:50:dc:c9:e5:99:19:
3a:75:af:8b:4f:64:fe:dd:58:f0:44:96:33:1b:60:24:90:a9:
d9:c2:aa:b6:61:a4:97:e5:47:50:bf:dd:fd:e8:0b:7a:9b:59:
5b:de:58:dc:db:02:91:b7:94:7f:64:41:fe:5b:64:94:85:51:
af:3c:b6:4e:3a:dc:57:83:cb:fa:d5:4b:c3:41:6b:b2:a2:13:
d0:f9:38:27:af:7f:84:cc:6b:2b:ab:36:80:35:97:63:4c:9a:
5e:c5:c8:ea:d4:36:82:20:20:66:e7:a6:99:dd:00:3c:35:86:
aa:b0:37:f0:fb:f5:84:65:0c:9e:93:11:a7:84:a1:4f:83:ad:
82:81:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:59:49 2025 by rpki-client