Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: L4sNIb4vbF48I/ZVdXAEYEgoT7qQjKN9w9eNskJCP2s=
Subject key identifier: E5:F9:9A:B4:03:8A:BF:98:EC:83:52:7D:B5:89:C6:20:2C:95:3B:6A
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 0197B70F4CFA5F38C20BEF310B51CF6A3C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 0672
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: 6y3Ctnb4tCM4v+IvRUJe3jftSEXjvDR8cgfpa/tFJtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4c:fa:5f:38:c2:0b:ef:31:0b:51:cf:6a:3c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=e5f99ab4038abf98ec83527db589c6202c953b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:52:6c:41:40:aa:96:3a:1d:a2:c9:72:11:
53:df:77:d4:73:fd:f8:55:96:2e:e7:d1:ab:91:d7:
f1:dc:38:71:ab:20:af:00:f1:96:8a:88:ac:03:1d:
30:64:a3:0c:f3:0b:87:19:95:77:ff:74:07:fa:ff:
aa:2a:7a:e8:a0:27:b0:ea:ea:dc:e9:5d:94:9e:76:
ba:49:2b:1a:7b:7a:dd:3f:e1:fb:c3:fe:7c:0e:47:
b6:ac:c1:c1:09:53:38:70:b8:d9:c8:2c:9f:33:37:
96:cd:e3:59:6b:ea:3d:9a:e2:08:4f:58:92:2e:d5:
24:98:3e:00:cf:2b:c0:2b:3b:d4:bb:0b:61:2d:d7:
3d:55:b4:5f:76:3f:7b:00:5c:04:e3:22:40:bc:54:
92:ae:d7:f4:dd:f4:a1:53:40:af:8e:0d:f5:95:37:
0d:e0:aa:17:2b:3b:8d:ce:1f:0f:7f:dd:14:29:ff:
3b:f5:43:28:63:22:8b:af:28:7f:8d:d2:d9:20:6a:
ac:70:9e:71:ac:d0:31:72:23:dd:10:30:d0:7a:88:
d2:f4:06:b4:3c:0a:bc:aa:da:da:69:1b:95:01:e4:
7c:20:0d:e1:12:28:47:08:db:60:96:04:8d:c0:d3:
4a:0f:e4:a4:0b:ac:7d:e7:42:11:c6:7c:df:7f:78:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:9A:B4:03:8A:BF:98:EC:83:52:7D:B5:89:C6:20:2C:95:3B:6A
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:93:3a:5a:13:6d:28:cf:f9:4a:02:2d:9a:69:9e:47:97:ab:
ee:57:45:42:bc:5e:c0:c1:ea:05:3a:22:5f:61:8d:03:7a:08:
47:34:f3:df:fe:1e:bb:64:c7:21:e8:80:05:b9:86:b7:94:54:
13:7a:3a:5f:98:b3:91:6a:04:38:02:4f:ed:43:f5:30:a3:62:
4e:6e:b1:bb:79:c5:25:03:9b:07:33:19:5c:21:7f:d8:72:3e:
69:fe:d4:96:c9:0a:ca:c3:5a:ca:c8:58:91:c5:7d:56:2e:62:
6c:9e:3d:71:b1:39:b0:8b:1c:70:07:09:0c:41:60:39:40:91:
c1:a4:de:51:57:5d:1c:ef:36:0e:63:e0:a7:83:6c:d9:5e:23:
f5:91:bf:48:b0:d8:6d:64:a9:b4:28:ca:a9:9c:17:9b:2d:0d:
19:5b:d8:28:66:2d:f5:05:fd:60:f9:17:0b:59:46:b2:18:6c:
2e:df:be:d7:2e:ab:5f:06:0e:f1:2c:12:d2:ff:89:53:2f:4b:
dc:b7:46:5f:3f:01:89:d6:3a:79:93:32:f4:bc:33:97:40:4f:
c3:b7:93:4e:ba:d0:0f:7c:5e:e7:ca:39:34:34:a1:dc:0f:54:
d2:d0:3a:af:3f:fe:cc:e6:38:4f:cb:4f:c0:46:fe:0d:93:26:
3b:79:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client