Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: 8a9yrYUKhH4kNHfOdp9irblxxxfDSqPJjHtfVBWon4w=
Subject key identifier: BF:E0:24:A5:5C:F0:95:85:78:AF:77:76:60:C2:24:41:DC:13:4B:80
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 0197C9F01CD3136B9006FC1CCA1CA38FD81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 05E4
Signing time: Wed 02 Jul 2025 07:00:45 +0000
Manifest this update: Wed 02 Jul 2025 07:00:45 +0000
Manifest next update: Thu 03 Jul 2025 07:00:45 +0000
Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: eUqJLot0UQu57ETNWvCGzbe0CsdstsxPijIGUAb11hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:1c:d3:13:6b:90:06:fc:1c:ca:1c:a3:8f:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Jul 2 07:00:45 2025 GMT
Not After : Jul 3 07:00:45 2025 GMT
Subject: CN=bfe024a55cf0958578af777660c22441dc134b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:3f:5c:e1:24:1a:7a:7e:c0:69:d9:2d:7a:
a1:d6:60:58:41:79:d7:60:61:78:fe:dd:6b:64:70:
d2:5b:ef:49:dc:d8:84:b0:d1:8a:6e:59:3d:6e:00:
9a:d5:a1:44:1a:dd:b6:91:17:02:1f:88:cb:78:ec:
86:50:da:e9:36:68:ef:28:00:04:ce:57:53:de:58:
51:cc:51:11:88:cf:f4:06:9c:e3:74:7f:3e:f9:f8:
3e:6f:49:5d:19:f7:ff:3c:ea:82:59:e6:17:e2:48:
5e:7b:15:b5:e6:43:0d:52:7f:d2:bc:e1:a2:b3:4b:
a7:d4:1c:94:8b:59:4f:48:30:ae:4f:21:65:39:19:
c3:85:fc:52:55:29:f6:96:40:70:4f:7b:a4:3f:ab:
00:15:12:fe:4f:ff:48:88:ed:16:28:dd:a5:c1:07:
76:56:2d:51:ad:14:a6:42:40:d0:ec:c2:07:21:22:
46:b6:46:db:7f:27:88:fc:0a:87:09:88:76:a5:7d:
74:15:87:40:91:89:9f:0e:de:c5:d4:4c:98:d4:36:
fb:1b:1d:34:d7:68:65:a7:d4:9a:b2:d2:23:32:38:
c0:c9:26:b8:5f:18:86:96:42:31:a2:fe:ad:4e:01:
09:c3:ac:d4:da:98:03:3f:68:68:2a:32:a0:c6:de:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:24:A5:5C:F0:95:85:78:AF:77:76:60:C2:24:41:DC:13:4B:80
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9c:e0:be:da:29:fc:80:78:dd:45:90:5f:90:da:25:72:e2:
18:33:fb:3e:71:34:45:ed:e9:76:46:20:de:d7:7d:fa:67:db:
eb:97:94:0c:4e:11:58:a0:ed:c5:54:c3:38:82:41:67:1d:a5:
ef:9e:be:94:4c:de:b8:f2:e8:fb:04:95:c0:3e:c3:27:c1:e1:
c3:74:26:0f:65:73:38:e3:3d:e9:73:15:6f:97:4a:eb:6c:20:
9c:28:ab:b7:65:14:79:66:b7:c9:90:21:cd:25:7b:45:3e:77:
af:3a:b3:11:50:ff:46:b1:74:18:25:9e:7e:1c:3c:5e:6f:98:
4c:57:f0:16:ce:ee:e1:fb:d1:3e:91:6a:73:e2:cc:b4:b5:9f:
bf:f6:c8:b9:ce:7e:f5:51:50:58:fe:7d:a3:68:a0:46:ba:6c:
60:86:09:a0:49:43:45:43:71:18:df:17:44:79:ec:b8:84:ec:
55:ea:53:9d:9e:0c:65:d9:30:bd:a7:16:6d:30:ca:bf:32:59:
de:55:16:54:40:9f:25:81:09:50:ae:bc:37:48:93:db:16:00:
71:45:20:06:20:a0:5b:db:f6:ba:49:59:24:d7:52:10:21:12:
c3:eb:4e:d0:8e:31:57:ee:5a:16:28:90:fc:ce:1d:d7:8d:b4:
06:f9:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:45:06 2025 by rpki-client