Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: wpDNr4QUVMxwyiZuXbR0Hh036gVMoFLMyq5MHhNhO0w=
Subject key identifier: 15:80:51:9A:B7:50:20:7D:BB:F7:DA:A0:F8:6F:07:A7:B6:EE:22:02
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 0197B5FBF99719AD8E8D5058545C94BA535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 100D
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: xm4W9Ys4rLo8CEKxpFRaJoj3YIiMvkYZbUZzCp5+Lf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f9:97:19:ad:8e:8d:50:58:54:5c:94:ba:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=1580519ab750207dbbf7daa0f86f07a7b6ee2202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:ef:6b:8b:cd:86:99:f7:d1:89:31:e3:60:
b9:bf:8d:c9:ce:e4:70:37:e9:10:66:b9:55:6b:f1:
d4:6d:cd:5a:c4:60:ce:b7:58:66:67:c8:8a:9a:18:
36:9b:5d:49:b0:14:91:bd:c8:1e:68:aa:ec:56:33:
4f:d9:87:df:6e:01:6f:a0:5a:a2:19:dd:a1:87:b8:
69:91:fd:d7:c4:97:6d:e6:b8:01:e8:27:4b:80:56:
9c:18:d7:a6:c2:53:fe:c6:d5:61:4e:b7:d5:19:c4:
c7:1b:7e:c1:ef:e5:c9:a6:f8:3b:65:c0:91:4c:ca:
85:75:06:5b:91:ce:4e:83:d5:14:60:c5:e5:25:f2:
96:4b:70:9b:34:cf:e1:75:7c:86:46:5a:35:f9:97:
46:fe:c7:c3:79:91:3f:9d:aa:41:d0:27:8e:33:84:
b7:96:d1:a5:0f:bc:e2:91:f1:2f:d3:f3:99:ad:44:
01:34:b2:8c:71:d8:7a:91:e2:86:1c:18:6f:a9:45:
e1:b3:76:9b:57:f7:2b:7d:b2:f4:aa:93:60:8f:55:
fb:9a:0e:0c:71:ea:7b:a6:ba:3c:1c:15:d7:84:29:
ec:a9:56:cb:1e:9d:db:f5:0f:9d:67:5c:41:ba:f0:
0a:8f:63:de:84:dc:19:17:12:14:67:8a:21:f7:43:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:51:9A:B7:50:20:7D:BB:F7:DA:A0:F8:6F:07:A7:B6:EE:22:02
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f2:9b:c9:bd:e0:db:73:96:9e:db:47:d4:29:92:61:be:23:
bb:33:bd:4c:d5:cf:55:63:e7:93:82:71:9f:35:c7:8b:26:9b:
69:41:fc:45:c6:07:f4:53:35:12:04:c4:84:1e:27:de:52:a0:
1f:c3:dd:9d:b1:b6:5c:3b:63:1e:5f:08:d8:cb:3d:61:f7:4e:
60:fa:fc:87:0b:1c:ba:33:af:0b:e2:a2:77:6f:73:91:57:95:
d6:45:11:68:33:b9:e9:fd:af:9c:e0:99:55:66:9d:e2:7b:6c:
93:2e:27:39:b8:07:85:19:6f:fe:36:72:68:6f:fd:6d:78:75:
aa:72:e7:94:83:cc:7f:c3:d6:1f:aa:3a:bd:b8:f9:5c:f8:eb:
65:c8:b8:41:85:23:a8:02:9a:18:c8:36:eb:d2:6d:c0:c9:e9:
4e:b7:9e:d8:db:5d:a2:46:5e:73:0d:6c:87:a3:8e:ed:64:4f:
80:4a:70:3d:9d:ba:f9:ec:d8:af:a8:fe:96:5a:d0:71:f4:5a:
9b:cf:c3:05:fe:5b:fb:f8:e0:73:a4:6e:38:29:45:9a:42:e3:
c0:96:2e:f6:8d:d6:a8:c4:30:72:5e:d8:ad:af:d3:31:47:34:
05:7c:9b:bd:57:3c:5f:25:50:c9:7b:67:15:36:3d:06:9b:1e:
e8:27:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:35 2025 by rpki-client