Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: CPTOZwrT0RYQphh82D80wZpl+IET2QRO8Qzd/ugw76Q=
Subject key identifier: 45:EB:61:4A:E7:94:59:89:AD:7B:E8:86:8E:F0:65:70:ED:3C:80:99
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 0197B9A154505386BEF1C18D693E598A9312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 03:00:47 +0000
Manifest this update: Sun 29 Jun 2025 03:00:47 +0000
Manifest next update: Mon 30 Jun 2025 03:00:47 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: oybUwuhY6rSl7vAgFaIwqv8ZvEPAo4C/Zj0GN/KsBYc=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:54:50:53:86:be:f1:c1:8d:69:3e:59:8a:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jun 29 03:00:47 2025 GMT
Not After : Jun 30 03:00:47 2025 GMT
Subject: CN=45eb614ae7945989ad7be8868ef06570ed3c8099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:bb:7d:bc:29:27:cf:05:a4:da:d1:2b:b3:
d0:47:9a:28:90:0c:43:05:ae:b8:87:f1:b8:d2:91:
ca:a1:99:fd:f2:26:34:ac:35:ce:a7:56:2b:e7:20:
c7:24:52:b6:e0:36:84:b0:44:b6:a9:b9:25:60:7b:
e3:47:e6:f6:b8:5b:dd:52:a2:02:91:52:b8:ee:3e:
ec:22:1c:51:9e:45:b3:b7:44:75:c1:bb:d4:f5:d4:
91:a2:1d:41:b6:bc:a1:95:43:e7:ed:81:98:23:a8:
a3:83:10:0f:57:c1:c6:c1:05:2c:5c:34:f1:91:79:
b0:a2:d0:b5:06:e8:65:bc:0c:46:51:ae:e6:81:28:
f5:c3:c2:f1:36:c3:31:62:d5:6c:6b:24:d0:5d:25:
51:25:1e:dd:50:c6:eb:f3:3d:40:08:a1:18:c1:df:
db:a0:36:c6:de:68:72:c0:ee:ca:82:1f:c2:28:b5:
09:52:42:da:83:f2:08:c5:14:5c:37:52:df:e1:e3:
65:bd:c9:8a:9c:1c:14:5f:20:ef:17:8b:fa:c9:b0:
f5:8b:1f:f1:30:b8:09:27:e3:5e:35:af:a4:6f:f1:
28:7c:2b:fc:a0:83:af:f0:6b:8d:b5:e0:41:a2:de:
f3:63:1e:58:f5:8c:41:eb:8e:91:ca:73:2a:e9:34:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:61:4A:E7:94:59:89:AD:7B:E8:86:8E:F0:65:70:ED:3C:80:99
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3c:31:6f:9c:d0:5a:95:fc:b2:9e:fc:03:1a:0c:f4:be:b6:
f2:dc:1b:11:bb:c1:41:c6:4e:0b:bd:c9:3f:22:8d:2f:31:5b:
6c:85:fd:77:e7:66:0f:bc:38:bd:11:86:e1:ca:49:a9:a9:55:
1d:34:45:70:02:d5:c6:ac:77:fc:80:c2:1b:6d:b2:2c:49:dc:
44:d3:2e:5b:77:15:0f:1b:e7:6c:45:08:ce:a7:65:d7:5e:6f:
56:33:29:b8:fc:14:0c:66:cd:35:da:9a:c6:a3:17:65:c8:f5:
c6:98:68:7f:69:d3:2c:81:18:3b:45:7f:0d:b6:6c:77:fb:76:
ac:7a:d3:93:7b:61:ad:86:aa:12:58:ac:6e:a8:96:03:8e:ef:
f5:8e:73:c7:84:7e:ea:8e:72:49:8a:b8:82:10:90:59:57:3d:
bc:16:f3:e3:b9:76:4f:24:32:4d:6b:32:59:a2:bf:c3:7c:0e:
01:e7:98:24:fb:94:9f:4e:f8:50:33:71:34:06:69:32:97:11:
91:8c:8c:71:81:16:ce:ed:a1:0c:2d:d5:5b:6e:8a:04:26:e7:
5a:ee:a1:37:7e:02:8d:4b:ad:6b:0a:6f:c9:e7:88:59:1a:47:
9e:43:e5:e0:90:7a:84:1c:07:9d:84:37:c0:87:3a:0d:f8:4b:
f8:b3:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:48 2025 by rpki-client