Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: N8PMaoDrJ9t80J1pvuG/CC1WlRKUlj1dBSG0Zn61eVQ=
Subject key identifier: 35:13:57:8B:7A:88:C8:D7:3F:A2:5E:FB:5F:A9:40:DA:3C:D4:98:A7
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 0197B5C4976284466E42314473622AF44C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:00:49 +0000
Manifest this update: Sat 28 Jun 2025 09:00:49 +0000
Manifest next update: Sun 29 Jun 2025 09:00:49 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: XJzbsMd20wagcoJCSU/7rKscBlhIYv1FEwGyHCl5nHI=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:97:62:84:46:6e:42:31:44:73:62:2a:f4:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jun 28 09:00:49 2025 GMT
Not After : Jun 29 09:00:49 2025 GMT
Subject: CN=3513578b7a88c8d73fa25efb5fa940da3cd498a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:fa:77:6e:d3:9e:09:50:01:9f:2c:cf:fb:
af:1f:6d:97:2c:6b:22:da:1f:35:b3:65:5b:99:b9:
e8:dd:a0:80:be:cc:b5:29:2e:f6:52:db:58:ee:52:
f1:95:8d:81:1d:4c:60:ba:d6:cc:a6:44:35:4b:7a:
ff:cf:c1:98:0b:13:9c:d4:ef:47:6d:48:d8:1c:6e:
22:e3:32:8b:4a:a7:7b:72:5f:bf:b3:6e:1f:53:5a:
7d:d3:7d:2e:a7:3c:65:83:af:e4:7a:fb:57:53:f3:
ee:c0:83:e3:0d:26:dc:08:18:fd:c1:86:b5:53:82:
91:65:77:dc:1a:0a:65:af:73:fe:a7:d8:88:ce:23:
a9:97:1a:1e:04:48:2f:15:c6:2d:45:c6:1a:ba:e9:
dd:fb:e1:4b:17:04:4f:6b:d9:92:c0:31:54:66:28:
d1:c7:c5:20:cf:86:e0:d6:5f:1a:6b:72:f9:30:70:
89:75:e3:8f:c0:7b:75:ed:cd:91:ce:e4:81:f0:7f:
56:94:b9:98:4d:5c:6f:09:2e:4f:32:a8:83:79:ad:
c9:56:c0:9b:46:0b:80:c9:12:45:cd:35:e5:c7:da:
d3:c4:c5:7f:89:a6:36:39:85:1e:7a:27:b1:61:ac:
c7:c9:81:2d:21:35:9a:fb:6e:af:e4:a2:b3:bb:33:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:57:8B:7A:88:C8:D7:3F:A2:5E:FB:5F:A9:40:DA:3C:D4:98:A7
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:4e:3f:8a:50:ad:71:c5:6b:24:0e:f4:09:cb:a3:0b:2d:
e2:f9:0e:14:70:9a:35:65:b0:6f:a5:c6:10:1b:f7:1d:77:d3:
17:c3:c6:3d:b1:53:33:4f:7c:d4:be:f5:07:e4:11:73:bb:1c:
58:6e:cf:58:17:8a:08:e7:6a:67:77:70:eb:37:59:df:96:82:
c1:f3:e1:de:5a:9d:43:1f:ab:60:6b:6a:1e:69:9b:72:cd:36:
09:f3:6e:2b:56:3e:2c:9a:0e:14:58:2b:d8:d7:97:fe:40:09:
31:1e:22:0d:51:46:87:b9:04:1c:01:15:c3:c4:ac:0d:32:13:
8b:e2:03:4b:f3:63:69:83:3c:0c:1d:77:fe:74:b5:f3:c1:a5:
ef:a2:74:51:82:59:91:24:36:09:b2:10:0d:c5:ea:18:db:a8:
a7:d5:83:05:19:ca:50:42:db:ae:5d:66:f7:08:c7:f0:f6:a3:
6a:7c:ba:1a:c1:9d:c2:5f:7a:71:8a:73:55:1d:ba:05:19:3b:
7c:f3:89:c1:22:2e:0e:57:fd:bc:89:5e:6d:6a:d4:65:88:70:
3b:8e:d5:96:a6:6a:c0:16:05:3d:32:64:f6:c6:ac:f3:93:b8:
b1:dc:c6:f1:43:5a:b2:74:1b:85:e6:88:36:6e:46:83:4c:03:
03:0e:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:43 2025 by rpki-client