Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: 23dIWVnQZv5JOCBqn7wBnPDU6FGIuRCpcQEapyhmECw=
Subject key identifier: B4:62:96:BE:B8:A5:CF:AC:AB:1C:F3:EF:AD:52:C3:09:3B:F0:99:9B
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0197B70E50BA369F1330CA64B80A0A9CCC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0F1C
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: 0wglx2e0W1bhJiuj2QHcJsTfTERAnfZuaWdgcsdA88o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:50:ba:36:9f:13:30:ca:64:b8:0a:0a:9c:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=b46296beb8a5cfacab1cf3efad52c3093bf0999b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:23:c4:81:d7:82:78:97:dd:90:e2:c8:7b:
2f:77:12:0f:68:5e:8a:55:9a:ab:ff:7a:b4:bb:f2:
27:59:07:68:dc:2b:95:d5:d5:92:41:b9:01:52:45:
96:cf:41:0d:bc:c9:2d:60:c2:b2:5e:bf:58:e2:1a:
f7:5c:e9:d5:28:71:e8:3b:5b:f4:c8:b3:7b:fb:63:
16:75:cb:52:3a:f0:4f:d3:ad:0d:6a:a2:eb:3e:d1:
0f:4f:9d:9a:c4:9e:e2:1d:e2:16:19:5f:97:10:8e:
c4:6d:34:1c:cf:b9:5c:e4:b2:91:69:14:5d:2d:df:
01:8e:6f:77:38:9e:cd:a8:68:c4:ec:91:2c:ce:6a:
e8:41:a5:d4:a2:ff:c9:61:f0:e7:a3:b8:11:ef:8b:
c9:b5:0f:4f:7b:e4:ec:38:7d:5f:bb:60:f4:1e:e0:
c2:50:9e:d9:8b:62:6c:e3:53:c7:12:e8:18:b2:ba:
d8:07:31:22:fb:cd:67:43:bb:c0:33:3b:f4:62:c2:
3a:5d:fd:d5:a9:23:18:85:ba:f9:5a:f5:fa:96:c8:
20:79:31:8b:82:33:09:8e:66:1f:2f:db:49:d2:c1:
5c:98:30:3a:64:98:de:27:d6:75:ea:ce:bf:04:c1:
51:cc:1f:f6:bc:2d:1e:3f:21:a2:5b:9d:27:aa:c6:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:62:96:BE:B8:A5:CF:AC:AB:1C:F3:EF:AD:52:C3:09:3B:F0:99:9B
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:c5:cd:8d:d6:a6:33:65:63:72:f5:90:18:c5:d6:c9:56:
0e:cb:12:32:db:fc:4b:a0:99:e7:ce:03:49:34:31:56:5e:2d:
52:eb:a9:80:2a:72:a8:3f:56:07:b9:bc:08:69:63:6f:9c:14:
4b:5a:12:79:fe:68:01:12:64:b5:68:d0:42:ac:a7:71:fb:91:
fa:b9:61:50:2f:e8:a4:6c:f6:bf:14:0f:4d:02:9b:6d:a9:81:
b8:cc:01:47:1b:20:5e:99:e8:35:16:e1:a6:23:37:8a:ba:a6:
14:5f:0a:78:0a:fc:a3:77:41:45:5c:b6:db:0d:a4:5f:68:36:
b3:ba:e7:24:42:d6:fc:d2:26:95:6e:ad:18:40:54:ff:7c:d4:
0e:4e:4c:57:3d:8e:d1:58:bd:eb:0d:14:bf:09:44:2e:26:ec:
df:de:fd:49:38:10:a5:61:c1:4c:a3:be:73:55:50:0e:9c:54:
33:a0:11:a3:32:cd:bd:77:ac:7a:3f:55:96:6a:75:8e:e4:25:
9f:bf:d8:f7:9b:3c:05:f1:76:dc:cc:5c:8e:ac:60:74:54:be:
08:c9:27:6b:ef:96:23:77:d2:9a:75:ff:d6:45:8a:39:d8:79:
18:fc:93:99:ca:81:ba:45:11:c8:5f:55:3c:2e:5e:13:43:b0:
22:19:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:23 2025 by rpki-client