Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: AxHcFuDk0KwuBKDmSQU1dSYKGlyOd/gxavZTfVaTbl8=
Subject key identifier: A6:D5:A3:3A:0D:BC:B8:8E:9B:A0:04:29:AA:F6:1C:BB:D4:3E:B9:0A
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 0197BAEB22530E999876EDD685B3609B9D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 09:01:01 +0000
Manifest this update: Sun 29 Jun 2025 09:01:01 +0000
Manifest next update: Mon 30 Jun 2025 09:01:01 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: c9OU+7VlhrVPHL+ynYKPfPM3h1PxFsTiKTLkhA98P3w=)
2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:22:53:0e:99:98:76:ed:d6:85:b3:60:9b:9d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Jun 29 09:01:01 2025 GMT
Not After : Jun 30 09:01:01 2025 GMT
Subject: CN=a6d5a33a0dbcb88e9ba00429aaf61cbbd43eb90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:06:79:52:c8:e6:cc:a7:0a:62:34:f5:48:
6f:0c:01:dd:b8:4d:9d:80:85:b4:6c:54:74:93:ec:
80:86:32:76:16:55:03:4c:a8:53:75:e2:75:ab:61:
ea:dc:57:23:51:2e:97:54:91:fa:ec:a2:57:8e:26:
1b:9c:d8:03:56:19:94:f0:d9:74:37:ee:74:9b:58:
bd:73:34:f2:c2:2f:66:f7:1e:0c:21:5d:77:90:23:
93:af:95:28:cf:a9:c9:5b:dc:1d:98:d6:35:76:48:
41:8d:b0:80:90:94:65:f1:02:bb:c9:6f:ab:2a:7c:
22:16:6b:56:86:00:bd:22:dc:a4:bf:cd:ce:54:3c:
57:d3:99:f0:d6:4e:c5:33:6d:1d:c0:2d:f1:63:e2:
ca:84:9e:05:84:e3:a4:4e:8a:55:d0:54:86:70:4b:
f9:47:89:86:bf:07:2d:66:02:5a:b4:ef:28:fd:94:
ca:20:10:76:bf:ff:f1:3e:f5:bc:1d:e9:e8:06:3b:
e3:d3:e7:6e:46:34:1a:e5:c9:0d:de:d4:b1:c2:a4:
d0:24:b7:9d:b3:83:ed:f5:c9:4e:f3:e8:1a:01:3d:
b4:31:d0:e6:4d:ab:36:e9:a4:01:14:00:7d:b9:41:
d9:9f:a6:09:f7:0a:ae:b6:7e:c0:21:aa:c0:38:81:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:A3:3A:0D:BC:B8:8E:9B:A0:04:29:AA:F6:1C:BB:D4:3E:B9:0A
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:b8:ed:d7:d5:85:80:a4:45:90:b4:0d:31:c5:54:c8:f7:
49:d7:02:b2:3c:1f:f3:bd:50:07:50:68:b7:ac:4b:28:8b:07:
fe:e4:4a:d5:a7:46:30:92:76:61:77:3d:55:ed:38:b8:09:31:
49:2d:94:4d:e2:dd:7a:8c:c6:05:ac:21:4c:f7:97:35:b6:ea:
2a:24:c0:93:f5:56:8a:fa:8a:37:ca:31:1d:70:92:f8:67:a2:
98:0b:ab:73:7c:0b:d4:2c:5a:24:02:52:f0:e4:ee:1b:0a:0b:
d9:7d:78:af:b4:54:6c:00:4d:57:a8:08:1e:97:de:e9:0d:69:
b8:9a:31:79:4a:a4:79:a9:8e:4b:74:00:de:d0:0f:57:49:8c:
30:c4:84:ca:f1:b4:9a:7d:87:4e:ac:67:df:74:75:9a:32:9e:
99:f8:60:c8:4a:be:0b:53:81:a0:9b:b0:cf:1e:59:04:bc:2b:
ab:31:60:cf:16:fc:61:26:79:89:c4:65:82:af:49:bf:be:4c:
9d:a3:ee:f1:0b:69:17:91:54:34:cd:af:b2:3d:00:58:91:b0:
e5:f6:15:24:07:f0:4d:aa:df:bc:22:71:f0:99:16:55:a3:33:
5d:ce:37:7d:16:20:62:f6:18:d0:02:35:ba:7f:0c:79:d6:59:
e1:ec:42:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:23:16 2025 by rpki-client