Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: oVj4rKGdtJhNv55ZtZXL7Sfn2Q7ybBwdtNC2J9BZGYg=
Subject key identifier: 28:FB:BC:FF:20:06:A6:AB:BD:52:32:F8:C9:76:DD:34:1B:68:CF:5E
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 0197B82112A261AAD12457F4C6390B0934AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 054D
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: NVmK4db13wBYBHvOJQFvQGXF3ugHt4qqwF+OKLDl7fI=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:12:a2:61:aa:d1:24:57:f4:c6:39:0b:09:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=28fbbcff2006a6abbd5232f8c976dd341b68cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:60:36:c6:a9:c0:dc:ec:50:3a:6b:fb:8b:
00:e4:a5:cd:91:5c:27:e0:f2:12:68:69:47:03:81:
a4:b9:e1:68:a6:ea:01:4c:66:f2:35:36:ac:58:e6:
59:db:f9:44:78:f4:f3:ff:92:6a:d4:ea:68:b8:c3:
97:85:93:cd:c7:b7:4b:3d:85:a4:2f:6f:fd:93:1a:
30:35:9a:cf:80:bd:0d:47:ae:ae:00:aa:db:26:fa:
ea:c7:6c:cf:37:d5:07:96:0f:86:4e:78:78:47:3d:
92:8d:04:fd:9f:0d:08:b1:53:99:6a:3e:e2:aa:0b:
85:27:83:99:ce:3e:d6:38:9d:65:bf:f9:b4:0d:4f:
7c:34:97:f0:4c:6d:3e:24:d2:74:84:ff:3d:ab:77:
aa:36:a1:9b:6a:e1:be:cb:c9:44:2c:f8:fa:cd:8b:
bd:0e:33:06:26:eb:fe:bd:ee:ef:e2:b8:f2:6a:f1:
30:63:9a:cc:b4:23:cc:4f:bf:03:2b:e0:7a:be:37:
9e:55:9b:8b:dd:51:31:32:be:0c:a7:3f:6c:c7:83:
8d:17:b2:76:60:75:59:fb:0e:07:ea:54:1d:d7:e4:
a8:73:ab:98:0e:ae:73:fd:18:1c:4c:6c:08:1f:72:
57:5d:9f:a3:12:41:fe:ea:bd:4d:e9:c6:57:7d:65:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:BC:FF:20:06:A6:AB:BD:52:32:F8:C9:76:DD:34:1B:68:CF:5E
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e6:17:c2:e3:eb:33:cc:ba:a7:78:40:ab:93:d9:51:8c:fa:
3b:e2:f9:d7:2b:ea:12:b8:92:78:c1:9d:7d:f7:a3:81:65:4f:
ff:b2:7a:6b:de:e9:93:d6:85:c3:04:d9:fb:bc:75:18:a5:1b:
7d:9a:c2:c9:a6:94:ac:5c:46:1b:b0:84:76:61:23:89:f4:28:
b7:4a:f9:09:20:28:5a:ce:c2:a4:97:16:91:65:b4:45:e8:04:
45:91:6f:87:de:b1:70:10:38:06:db:82:97:77:fa:7d:e7:ea:
51:62:0f:90:3b:f4:f0:78:ad:e2:f1:e4:bf:42:d5:9c:0d:70:
ba:ad:a2:1e:72:da:ef:57:08:d0:07:b4:7c:59:80:69:00:72:
c0:19:c1:53:aa:7e:05:2a:6e:e1:97:01:20:c3:61:b3:60:24:
ba:b4:e5:12:56:39:b5:83:0a:ab:2b:08:be:48:14:46:da:2d:
7a:cf:66:41:f3:b3:38:6e:1f:cf:d2:36:c6:a3:d1:12:07:3e:
37:cc:c0:cd:2a:8d:82:54:40:d8:04:74:39:d9:d4:d4:36:8f:
05:17:2f:4e:da:34:c6:85:ba:69:29:82:ce:86:b3:c0:35:f1:
f6:5b:c8:aa:9b:1e:25:f1:4c:31:86:f1:f7:22:96:dd:31:24:
4c:3f:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:29 2025 by rpki-client