Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 2giDjBq6WKJTSsILOAJ6j7Olk8iKSOSR7PhjKv3Tg+k=
Subject key identifier: 30:23:48:5F:3C:3B:71:C3:E0:A2:BA:6E:10:5F:39:54:92:03:85:B1
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0197B77CCCF156A47AB2D4953DC1C63C21D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 082B
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: wVvi84PnEEO1/mtZYE48DO5dvubNOPU+aR8XR0Y1vow=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cc:f1:56:a4:7a:b2:d4:95:3d:c1:c6:3c:21:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=3023485f3c3b71c3e0a2ba6e105f3954920385b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:84:b1:f4:e0:de:a4:ef:a1:49:3c:38:27:
f5:ba:43:be:3b:4e:e1:b9:4f:b5:2e:1f:83:e4:fa:
50:0a:cf:77:a4:73:60:30:b9:22:42:f2:63:6a:fa:
3d:af:53:6e:d8:1a:54:3b:ba:51:c3:70:c4:44:b8:
ac:e3:cf:06:79:91:58:71:64:90:60:c6:1a:eb:a2:
b2:41:0e:f1:b8:f7:b2:44:8f:16:b5:22:eb:07:20:
b1:d7:19:3b:b0:21:34:94:49:0a:64:04:db:de:7d:
67:89:a8:67:a0:df:2d:72:d5:c4:4f:af:80:36:40:
7f:ac:5b:68:24:23:7d:d2:a7:69:06:40:f1:1d:9a:
d6:33:79:2a:4c:fa:12:ba:e2:c9:5e:f4:16:0e:81:
bb:d6:c4:6e:12:74:50:22:fa:f2:c7:c1:92:aa:cf:
25:b4:c0:bf:67:74:9f:1b:a5:2a:b9:33:36:db:75:
47:1b:3c:f3:cc:71:01:9c:2c:30:e6:da:d1:d0:d2:
e0:9e:c7:48:4b:20:72:0a:64:59:3e:48:60:fb:44:
c7:1f:37:fe:0c:b1:d0:40:1a:60:ea:8d:02:d4:e1:
99:2f:ff:4e:04:cd:30:00:c5:37:78:97:64:6a:7f:
5a:7b:c5:17:c0:82:0f:ab:c1:8d:a9:1f:a4:f3:88:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:48:5F:3C:3B:71:C3:E0:A2:BA:6E:10:5F:39:54:92:03:85:B1
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0a:2d:f3:ba:71:c3:8c:9f:eb:d2:e7:b5:a9:b7:e6:9d:4c:
13:f2:87:14:71:30:16:d8:0a:5b:c1:06:7e:d0:9f:00:e8:a3:
77:38:72:9b:a5:be:d1:e7:0e:f9:14:6e:e7:ad:07:ac:a8:d5:
75:05:d4:a7:a9:11:ce:5c:e5:2a:1e:d0:f4:4b:87:6e:91:bd:
c9:34:7c:39:2b:1b:bf:0d:37:c7:2c:d1:78:69:ce:6d:db:37:
b1:85:43:0d:e7:fc:27:6d:ff:64:4a:f4:cd:31:cc:41:b6:80:
d3:45:3a:2f:49:7d:97:1b:ca:6b:d0:10:69:ce:fc:9e:da:56:
52:23:ea:51:32:58:8c:50:24:8d:1d:d7:08:34:fb:b0:4d:11:
b1:af:c3:eb:81:b0:9e:92:69:75:7d:64:8d:fc:73:76:9d:f3:
2d:ae:28:a7:c3:5b:5c:56:1f:76:ba:ea:02:e4:19:94:c6:b9:
ee:5c:30:64:2e:e6:3b:c0:87:10:e1:8a:6e:a5:9b:e8:d8:8c:
73:a0:5a:27:20:93:0e:6c:ba:18:86:1d:4a:92:31:8b:29:e3:
c8:7a:44:6b:e2:24:84:99:d2:09:63:74:b7:61:a6:86:f2:7a:
bd:3c:75:85:a0:d8:3a:74:85:23:7d:ae:e7:d2:b3:46:7f:6c:
90:55:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:43 2025 by rpki-client