Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: fi3g/kmiR7AzY84tmcmbbES2SBBmTubeXyrSdpct9qw=
Subject key identifier: 6E:43:37:E9:AA:14:6D:F0:B7:F7:C7:54:98:F4:77:ED:F1:FE:62:00
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 0197B6A11CA29F8CC6EE71B740F0B322598C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0CFE
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: TpmbIcgQ9I6Br4KrA7cPikEIS8Yd7vICcuyfRO/NAoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1c:a2:9f:8c:c6:ee:71:b7:40:f0:b3:22:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=6e4337e9aa146df0b7f7c75498f477edf1fe6200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:4c:6e:d3:fc:2f:32:b2:99:b8:66:28:03:
65:89:82:4f:2b:52:d7:d2:fe:4e:63:ef:c0:42:c9:
43:86:a9:21:bf:06:f6:a9:12:87:8d:28:ef:da:72:
8e:10:7d:38:74:6e:cb:df:d6:aa:f0:73:b6:85:51:
1a:ef:ea:52:d9:08:3b:ca:16:13:33:32:52:ef:9a:
98:6b:92:9f:04:23:8f:10:5a:72:18:c6:e5:e8:7b:
41:b0:ec:41:2e:2d:60:a7:4b:0a:13:95:f3:64:27:
3e:57:16:1e:3a:cc:3a:40:28:c5:ca:59:7b:78:eb:
b3:15:ce:11:83:9f:65:28:61:3e:3d:94:df:75:3b:
13:5b:2d:cb:4d:72:1c:f1:36:b1:bc:4e:89:81:7e:
c2:ed:fb:5c:62:8f:f9:01:60:82:37:60:ef:09:cd:
7a:98:cc:86:bd:63:cb:c2:26:ac:1e:53:68:c9:6d:
63:62:35:58:0b:ac:0f:8e:ba:5e:8e:b6:02:b6:bb:
ee:f0:5a:46:b6:03:b8:52:11:63:75:5a:6b:00:00:
ec:14:60:69:4e:86:c9:26:3c:24:ec:9d:42:b8:8b:
50:a1:7e:02:f8:4d:aa:0d:2b:1a:6e:90:96:e0:fa:
b1:e0:98:5f:d5:5e:52:1c:66:11:a3:03:4c:e6:20:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:37:E9:AA:14:6D:F0:B7:F7:C7:54:98:F4:77:ED:F1:FE:62:00
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:ef:a9:4d:b5:84:9b:c4:fc:59:a3:09:67:2a:17:aa:45:3a:
a4:07:93:6d:96:a5:24:79:41:5d:ad:fc:10:54:0f:7e:b7:42:
60:af:af:d0:37:a6:7d:26:ec:11:7b:46:56:ec:e8:a8:74:23:
7c:c7:3f:ba:35:d7:4f:e3:32:ee:99:9d:22:dd:1a:37:0b:c0:
6d:35:4a:20:51:3b:33:d2:3a:2b:a5:df:91:51:7a:d8:70:68:
67:26:26:fd:69:2e:06:a2:7b:0c:15:fc:d9:35:a0:f8:9a:1c:
bc:f2:49:17:35:cc:ac:cd:13:c1:b5:d4:a6:09:cf:65:e1:b3:
fb:87:a5:1e:84:57:3d:1c:35:87:a7:02:23:43:1c:34:51:33:
cc:53:13:e4:50:4c:ce:8d:01:51:ed:e5:9c:c6:b8:44:1c:9b:
87:12:90:4e:8a:2a:ab:16:fb:5f:6d:ef:79:fc:07:bd:96:33:
d3:c9:c4:bb:be:71:3d:3e:4a:d9:04:38:90:6e:c8:89:76:4a:
9d:26:ae:2a:2d:e4:62:1a:98:98:be:ad:81:2e:4b:56:75:77:
b7:36:b9:47:b5:46:4d:21:35:32:b1:e3:80:24:b7:68:3c:7e:
01:95:f9:7b:bb:a7:ba:64:5a:94:4a:61:eb:9b:14:cf:40:dc:
df:cf:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:33 2025 by rpki-client