Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: tFzEYtCB9U/WEvmlFpLJ7jfaQfw6TPnbCW9WcsEt9wA=
Subject key identifier: BA:97:29:C3:32:1F:62:60:9D:E0:E1:F4:12:B8:B8:60:6D:A6:68:E3
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019748C347D31673332710383906306EBC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 10B7
Signing time: Sat 07 Jun 2025 05:00:46 +0000
Manifest this update: Sat 07 Jun 2025 05:00:46 +0000
Manifest next update: Sun 08 Jun 2025 05:00:46 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: RBLWRMQInZhsVu27pBDb+Kr2tzhrwC0X7Vode9ukoIk=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:47:d3:16:73:33:27:10:38:39:06:30:6e:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jun 7 05:00:46 2025 GMT
Not After : Jun 8 05:00:46 2025 GMT
Subject: CN=ba9729c3321f62609de0e1f412b8b8606da668e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:66:cc:44:3a:fc:cc:dc:ec:11:ce:46:13:
a4:f1:f7:6e:5e:f2:81:ed:df:59:b0:97:2a:72:4b:
6c:0d:f2:65:2e:03:00:d0:b5:d2:0c:4a:55:71:d3:
7c:d1:2f:2a:fa:40:4a:df:1a:f1:52:73:33:0e:1f:
de:94:e5:bc:8e:d0:2a:30:43:76:e0:12:ff:b9:b0:
e2:d7:60:6c:c4:41:f1:76:fc:c8:98:89:95:c4:b0:
3d:cb:dc:da:4a:91:6f:4f:8d:54:2a:48:1e:74:35:
38:fb:2b:29:97:53:36:84:09:a2:bc:15:f7:bf:b2:
6a:72:4d:b8:b3:30:51:1c:73:fe:27:8b:9a:ab:f5:
da:8e:38:f3:c5:93:5f:98:c8:f1:ae:81:82:35:4e:
2f:b6:66:5d:0c:1b:0c:a7:de:16:6f:2e:e4:0c:e8:
01:e1:3a:fa:45:48:70:70:3b:4d:6e:1e:ea:75:f8:
12:24:cb:0f:09:90:5b:6d:63:f2:15:75:6f:13:68:
9b:80:6d:c3:40:69:fb:f9:21:21:12:c5:7a:98:91:
cb:37:a0:7a:11:a0:a5:fd:d2:59:2e:bd:8d:cd:0f:
15:56:6e:15:ba:7b:cb:0e:5c:7f:5c:3f:06:f4:9e:
64:ab:7c:24:25:5c:40:db:75:0c:a6:2c:4f:42:0c:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:29:C3:32:1F:62:60:9D:E0:E1:F4:12:B8:B8:60:6D:A6:68:E3
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:30:95:58:8f:97:0f:5d:61:f6:e6:9b:0c:51:b2:df:7f:ea:
ab:8a:8b:af:35:5e:d5:69:27:8b:6e:76:d0:4e:f8:6d:de:30:
a6:ab:f7:62:fe:6a:41:35:38:b9:90:6b:33:7a:27:94:f7:b1:
44:24:7c:ae:41:3e:a9:e2:bf:24:2c:d2:ac:8f:fb:76:02:e0:
87:49:4c:d5:60:ef:f7:0c:fe:e9:64:98:86:e8:ec:a7:8b:cb:
cb:22:d4:90:62:d3:45:46:7d:9a:56:58:1b:93:60:3f:f4:68:
6f:7d:4a:33:38:b1:4d:45:66:22:ed:e3:73:50:54:01:d2:32:
e9:7d:77:d3:a2:29:cf:f6:96:6e:f0:c8:a5:a8:76:e2:cc:e7:
46:38:4f:58:6d:1c:74:4b:61:8d:05:a9:e3:71:a8:6c:9d:2f:
ac:4b:fb:e4:32:3c:bc:4c:40:29:44:3c:f3:00:e1:11:f7:87:
d1:a7:d6:11:72:27:00:bd:8d:77:a3:f2:87:17:2b:e1:e4:f7:
c7:b9:28:43:3b:df:fb:63:69:e9:12:a6:4d:88:e3:11:86:18:
8c:fd:c5:45:df:b0:6c:41:6a:b0:e5:d0:5e:73:7d:b5:0e:79:
be:18:66:d6:ad:16:86:71:f1:8c:6c:0a:9f:d6:84:af:a9:26:
f9:ed:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:43:27 2025 by rpki-client