Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: lohC4uVynhyVBYmBU/eCJRTD+OKsKDPiCuCisd7O808=
Subject key identifier: EB:91:F4:44:5A:A3:E9:D6:8C:E6:99:D2:C2:C2:4C:88:1F:2F:ED:AE
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 0197C801FCD92254FD8EE3FA23C241242097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 099B
Signing time: Tue 01 Jul 2025 22:01:02 +0000
Manifest this update: Tue 01 Jul 2025 22:01:02 +0000
Manifest next update: Wed 02 Jul 2025 22:01:02 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: DTtU8nwEK4W7FuL4Z3G/r1PgBbg8oGtC/e8QnxSI66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:01:fc:d9:22:54:fd:8e:e3:fa:23:c2:41:24:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Jul 1 22:01:02 2025 GMT
Not After : Jul 2 22:01:02 2025 GMT
Subject: CN=eb91f4445aa3e9d68ce699d2c2c24c881f2fedae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:ef:84:b8:23:23:76:4d:59:49:09:fd:0b:
67:cf:e9:a0:01:68:0d:17:a2:2e:f7:ad:64:f3:d8:
d3:6d:15:06:ce:c1:90:03:22:f7:87:60:72:84:a1:
af:54:93:f9:dd:c6:5d:80:6a:0b:4a:3d:9f:8a:25:
e4:3d:f3:70:ba:4f:ca:fc:2f:ca:34:1e:08:a3:a5:
22:ed:7e:55:d8:3f:cd:57:0b:ef:e6:a8:13:86:7c:
e6:51:c5:24:0d:03:34:1d:57:07:86:2e:59:9e:09:
60:9c:bc:d1:cb:1c:fa:ff:72:f2:7b:7e:28:94:2d:
8f:07:73:d9:b0:59:cf:12:04:87:7d:3e:fc:42:d9:
06:88:04:d9:82:d6:c5:0c:43:67:9f:19:9c:05:42:
2f:9c:d2:56:50:23:23:a6:19:d2:b0:e5:8b:aa:59:
03:ca:e5:b2:42:64:14:7e:f2:d2:32:99:7c:6f:34:
a8:a3:c2:f8:ad:21:42:96:0a:e7:45:70:cb:c4:1e:
49:29:76:f1:d5:d8:8d:3a:de:3e:01:91:e9:be:e8:
dc:01:40:29:cf:19:b7:e8:9d:75:0c:98:a1:16:9b:
75:bb:3d:2f:ab:29:91:0d:c6:5f:d2:88:57:46:43:
29:9a:da:bb:4d:88:aa:6b:c1:45:24:c9:1f:20:b4:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:F4:44:5A:A3:E9:D6:8C:E6:99:D2:C2:C2:4C:88:1F:2F:ED:AE
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:c2:e5:ce:58:ec:ac:62:50:98:bd:da:49:89:ca:f1:6e:
85:08:91:02:c3:00:8a:2a:e5:94:0c:56:db:0a:f5:83:c6:a4:
73:fd:a3:32:bb:ec:86:65:e8:c1:59:89:c8:79:d3:ff:1f:d4:
25:ef:88:cf:ed:27:b6:20:57:a4:72:8b:8b:b4:23:6d:60:8b:
b5:ed:85:66:d2:16:cb:8f:40:a3:4e:8a:33:4b:9c:dc:76:10:
eb:a7:ae:8c:36:3c:4e:99:58:ff:39:12:19:0f:2c:11:59:25:
81:70:58:6a:e1:31:9e:ca:23:1a:04:2d:63:31:a2:94:eb:d4:
66:f9:3e:96:a6:72:a9:2e:00:f9:e2:21:74:92:4f:ed:f4:4b:
1c:67:0d:b3:4d:0d:56:04:ec:ad:c4:e2:84:e4:e2:69:a2:7f:
c8:48:9f:54:b2:33:2f:89:3a:95:f5:ce:ea:e6:68:68:03:8d:
cb:7a:ea:76:f8:1f:f3:d8:c9:33:52:4f:39:06:e2:53:1e:df:
68:b5:4f:f8:3e:2a:92:bb:95:b5:d8:4d:8a:6c:3f:4d:22:dd:
85:c6:8c:e2:65:4c:b0:8f:97:92:ff:5b:df:00:7a:34:8f:90:
75:59:7e:aa:e2:e1:f5:07:8b:e2:26:0c:c3:ab:19:56:95:2c:
9d:89:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:57:38 2025 by rpki-client