Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: D2jS7P0v06tcbKLEGQGAXXlS8ZDvByXnmIgGcDQ7ZRA=
Subject key identifier: 49:96:1C:AE:35:DC:FF:DA:C9:40:98:34:36:A4:09:CF:B8:E9:63:9F
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 0197BAEB2DA31203E37D525DD559BBC491C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 0633
Signing time: Sun 29 Jun 2025 09:01:04 +0000
Manifest this update: Sun 29 Jun 2025 09:01:04 +0000
Manifest next update: Mon 30 Jun 2025 09:01:04 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: hi83rbNCnvKImH2BgVyjlHgMDt9bt+ZKsx58JWt/Gt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:2d:a3:12:03:e3:7d:52:5d:d5:59:bb:c4:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Jun 29 09:01:04 2025 GMT
Not After : Jun 30 09:01:04 2025 GMT
Subject: CN=49961cae35dcffdac940983436a409cfb8e9639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:18:a5:f1:77:30:7e:a2:cb:2f:ac:03:e4:
02:46:c9:9a:67:f1:cf:77:30:d8:0d:26:e9:7d:30:
53:b1:30:ab:27:c3:9c:2a:fc:b1:21:c8:4e:da:b6:
95:1b:cb:3c:cc:28:0c:fa:47:27:7a:58:b0:ab:ec:
50:08:2a:06:ac:10:97:6f:57:62:e6:a0:61:49:14:
88:b5:c1:b4:ca:d2:bd:76:63:75:44:85:f7:0a:e9:
43:98:d9:2c:f3:c7:57:46:5e:db:f7:49:1e:0e:5c:
dd:d4:cb:fd:18:f9:f3:31:05:f8:2c:a3:da:94:80:
89:00:89:f4:86:fc:cf:8e:83:0a:8f:e8:eb:a4:04:
6e:93:f6:54:43:c2:c9:28:36:fb:3f:bf:a7:d5:af:
d6:73:a6:ee:ec:43:e2:e0:4f:32:d9:8f:5c:15:5b:
51:e2:53:87:0f:de:5c:17:ed:52:68:29:b4:ef:8e:
85:34:b4:7e:ed:ae:a6:5c:81:3b:75:53:7d:08:96:
33:24:78:ab:4d:cb:62:e3:d3:1d:d0:d3:ff:41:62:
10:cc:5f:91:fa:6e:d0:38:57:79:5c:51:bb:1f:2b:
c5:c4:02:3a:5a:89:47:26:95:15:0c:37:ec:7c:97:
14:5d:d8:86:e1:10:c1:bf:cf:91:08:a2:f4:ef:af:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:1C:AE:35:DC:FF:DA:C9:40:98:34:36:A4:09:CF:B8:E9:63:9F
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ad:bf:2e:73:a3:4d:25:9c:9d:f4:6d:3b:a1:ed:5c:1f:04:
a0:87:39:f4:9c:6a:0f:b6:48:ee:5f:f2:53:42:e7:16:88:d2:
eb:98:29:e3:56:47:35:8c:3d:10:51:b1:d6:96:23:19:7f:dc:
fd:02:c2:c6:0a:18:e2:93:e3:f1:8b:9b:ed:7f:5f:0c:3d:35:
7a:20:a5:49:fa:d6:61:cb:c0:c3:a1:b9:c3:0d:54:d6:12:38:
9c:a4:0d:4f:b2:58:50:68:99:2d:33:c8:cd:74:59:f7:27:c9:
6d:35:fe:8f:c5:81:ed:66:77:21:80:98:52:26:45:1d:a4:e9:
98:94:51:78:1b:2c:fa:04:64:2d:2e:71:4a:93:93:77:e9:f4:
f8:52:1a:65:87:c2:0c:8a:03:54:1f:7d:78:e4:7b:76:31:61:
08:f6:b3:a5:59:97:21:8f:7c:e0:ac:c4:9a:99:35:2c:01:c0:
f4:a4:d5:69:fa:d4:9b:e6:5d:fa:97:0d:79:f2:eb:e3:a8:8c:
b1:25:b9:66:9a:f2:0b:15:25:39:e9:55:41:1d:6c:2c:f7:28:
33:36:99:c3:de:ad:a3:4a:78:ed:a4:ff:0f:05:a0:68:82:fc:
bb:48:91:c8:15:5b:93:ba:5d:20:e3:c3:50:e9:46:95:b7:f2:
e7:b9:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:34 2025 by rpki-client