Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: LgHAFmTYewIXsbJKcqfFhY6exLgZ6OIIjEo/YT80Z2c=
Subject key identifier: E8:4B:98:8C:4D:A1:16:FE:1F:C6:33:E6:07:08:A1:CD:99:DA:50:01
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 0197B7EA988623CA5C869A423E68ADC94D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0A33
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: iIPZaYy4pbak8w88n8/9mrvfvPPBxrNhKL6wcdmG388=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:98:86:23:ca:5c:86:9a:42:3e:68:ad:c9:4d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=e84b988c4da116fe1fc633e60708a1cd99da5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:32:64:88:8c:51:3e:1e:e8:18:42:c9:52:
52:a6:42:96:6e:74:b6:cf:35:d0:a6:13:fa:3e:2f:
12:3f:84:66:ee:26:23:1d:91:34:47:82:73:0b:8b:
7c:e1:02:53:7f:ee:d8:42:86:54:46:f5:85:af:ae:
89:41:3e:b1:92:b8:7b:d9:b9:47:24:10:dc:f6:dc:
3f:78:9e:40:e1:10:30:97:7b:79:46:8a:7e:ac:2f:
e6:e0:07:b1:b2:42:56:00:80:bd:b8:7c:00:b4:7a:
f3:89:f5:70:de:9b:92:e2:66:71:fa:4a:43:a0:fe:
8d:d1:99:0a:d0:00:aa:1e:25:ed:62:b9:c4:7b:7b:
8b:7e:46:b0:0a:6e:fa:20:ab:01:de:71:30:76:b6:
7b:9b:fb:8d:47:44:fd:93:ed:fa:42:50:0b:58:90:
51:31:b1:94:6d:68:85:07:68:77:8c:84:9a:ea:1f:
d5:3a:d3:61:73:33:c7:7b:54:cf:27:f7:85:72:c9:
4d:c2:57:20:74:4b:8c:7c:ec:1b:00:b5:c5:c3:f2:
17:dd:e9:96:b6:a0:6a:ef:37:52:b1:ed:8e:44:db:
6b:4e:ff:00:b6:a9:49:d6:82:99:ce:c4:fb:63:07:
00:3a:4d:4a:88:b7:36:9d:5b:16:8f:56:a8:aa:1f:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:98:8C:4D:A1:16:FE:1F:C6:33:E6:07:08:A1:CD:99:DA:50:01
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:76:91:40:3d:74:95:24:ae:3d:f7:9e:09:8f:5a:e4:f0:
20:cc:f5:d4:3e:96:47:a8:a3:b5:0a:d9:99:22:2d:2f:d8:7e:
59:e4:7a:34:aa:d5:33:3d:3b:f7:a9:f5:34:52:e6:f0:5c:be:
5e:47:be:5f:98:f6:91:eb:6c:26:79:5c:3f:6d:d5:c6:17:d3:
b4:95:ee:d5:40:45:e7:c1:db:09:57:ae:41:ec:21:eb:90:e2:
e4:08:50:40:03:c3:5d:20:cb:5f:4f:e6:8c:69:c9:2a:16:ac:
f8:68:37:cb:73:f9:b4:c4:b6:50:37:2e:b9:b8:cb:19:f8:cb:
d9:8b:4c:a2:e4:b0:89:36:06:33:83:e5:7a:82:30:03:07:48:
7d:f6:ac:c7:0d:4a:6a:67:83:aa:8b:f9:47:49:61:18:02:c5:
4f:69:20:64:05:c4:26:98:cf:f9:27:09:76:e8:ec:cc:93:57:
bf:ba:a4:12:c4:d2:6b:e9:dc:bf:a7:19:b0:66:dd:d8:df:ab:
c4:c0:00:c1:fa:97:b3:ac:96:1b:42:94:83:77:4b:2e:51:0a:
27:77:cd:54:64:3a:5b:3b:e6:67:91:8b:f2:b1:11:f9:69:08:
0d:61:c0:39:f2:76:b4:9f:60:2b:14:37:23:3b:be:23:58:5c:
9f:f5:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:52 2025 by rpki-client