Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File: Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier: lHW/A/qu8kLeY42Y/HVFDYQGzCh3gVF8eRWI40Wtau0=
Subject key identifier: E5:67:F4:94:C3:07:BD:AA:89:22:D5:74:38:3F:17:30:95:D5:7B:C8
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial: 0197B70EE592D60C751067D024340A628A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number: 0137
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: i8H4a2iSEA7nTZ+1TVABZDs09KsDpA7dY47yPl0ItYk=)
2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e5:92:d6:0c:75:10:67:d0:24:34:0a:62:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=e567f494c307bdaa8922d574383f173095d57bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:51:72:b5:f1:da:e5:7e:8c:68:95:dd:f7:
b5:f6:af:6e:27:86:7e:56:1a:ea:ba:1b:6f:89:b9:
3e:11:7a:d7:1c:ee:34:86:fe:02:9d:2b:e4:f5:b5:
43:de:f6:27:bc:62:ed:ec:54:73:32:48:ea:ff:19:
e5:74:23:f6:15:b6:a3:12:87:1e:ab:55:75:37:ff:
f7:9d:01:e1:3d:38:c3:54:f2:3e:70:36:b9:bf:d7:
cb:e3:53:4a:2d:53:74:2d:2d:e3:06:5a:a7:2c:fe:
0f:11:e2:02:6f:d4:e3:d3:77:ce:b0:79:42:98:4f:
f9:69:94:0e:31:e5:0e:38:9c:f6:be:f5:2f:4d:e6:
e9:ce:08:16:7e:3f:61:c7:8a:4e:f3:45:ab:a2:92:
e9:96:60:83:a6:88:cf:48:c7:0d:c2:2e:8c:35:92:
48:59:62:cd:4d:92:17:5d:e5:c9:c0:94:f4:53:a8:
d1:17:b9:2e:61:90:15:22:1d:5a:c5:87:0d:fd:c5:
41:69:24:c7:ef:73:4d:38:ab:7d:30:80:3e:62:96:
cb:24:db:33:28:ad:fc:f4:8d:8d:16:a0:6c:a0:7c:
22:43:8f:df:9e:56:2e:c8:d8:04:43:b3:12:ed:fa:
fc:a8:23:f9:4f:17:9c:16:1c:45:64:10:61:3b:65:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:F4:94:C3:07:BD:AA:89:22:D5:74:38:3F:17:30:95:D5:7B:C8
X509v3 Authority Key Identifier:
keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:29:b6:79:a6:52:61:26:ce:38:cc:a0:a8:34:ca:4f:44:
27:4c:fc:76:e2:40:2c:b7:c8:ac:e2:20:95:e0:ef:46:d7:db:
db:3d:ef:19:37:5a:5e:04:ca:09:88:0a:21:68:fe:04:5e:f2:
af:7c:6d:8f:fe:b3:c0:b5:18:61:2b:18:17:f6:4a:b9:4a:ba:
be:ac:65:32:11:96:13:ef:cf:bf:97:78:25:b7:61:71:db:ad:
58:57:07:60:f6:0f:08:73:83:5c:88:75:2b:c3:06:b7:de:bc:
29:40:bd:45:f2:c7:a0:cf:22:f8:3d:6a:8e:7b:85:3a:fb:00:
c2:11:42:25:ba:ff:70:55:04:df:e2:ec:4d:1b:65:5b:75:07:
0e:61:4c:0d:32:19:9e:2c:d3:d3:61:b6:b4:8c:8d:c3:44:cd:
86:18:c3:6a:cb:dc:9d:8c:d9:8a:42:2f:a8:b3:ac:c2:ac:49:
21:f7:2f:27:24:1c:8d:d0:63:9a:31:76:01:68:c9:f1:73:7d:
af:91:8f:0c:b4:88:9f:40:fd:40:61:06:84:11:6e:4e:18:57:
98:90:a9:20:59:74:39:c1:7c:ba:70:6b:ab:f6:09:06:8f:a0:
b0:9e:5b:dd:06:65:3c:dc:84:9e:60:bf:ea:49:d4:36:7b:56:
e7:f2:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:29 2025 by rpki-client