Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: 6K+3xaS9H+DponHcaJYqmshZotl9wZ9RlCr/Nz2t0xs=
Subject key identifier: C1:E0:85:A5:BB:06:9B:AA:DF:56:9B:D7:46:24:1E:4A:81:B9:1F:7E
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0197B6D7BD99A35821BD7F7E648F3ED11131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 10F0
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: u918PdcWm/VLcGaBV562TUpXda0uYYh8ggS1fj7hI1o=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bd:99:a3:58:21:bd:7f:7e:64:8f:3e:d1:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=c1e085a5bb069baadf569bd746241e4a81b91f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:59:bf:33:81:61:35:b3:2d:d1:68:da:6b:
72:9e:88:db:e1:db:89:ca:24:a8:6b:d9:e8:b5:db:
41:c5:c8:a2:7d:e7:aa:fe:49:0c:c6:1e:f4:3d:a5:
8a:04:0f:2c:dd:f8:80:dc:a8:8a:1a:72:3a:bb:81:
5a:06:0e:0b:28:e8:cc:94:d7:51:85:74:4c:6c:fa:
34:bc:7b:d5:7b:55:e3:23:e8:a2:d2:92:92:b2:06:
c0:ad:f5:95:84:47:05:a7:b4:56:1e:eb:f6:32:d3:
cc:68:9e:40:8d:17:9f:b5:80:8a:64:f0:19:76:64:
1f:14:a0:f6:2d:51:50:94:4c:e6:5f:15:dd:24:e5:
22:68:d8:ef:91:82:29:4c:8b:9e:a6:fd:8a:92:87:
36:f8:7a:bc:8d:bd:66:93:7f:df:6e:a4:e5:14:55:
9e:80:02:59:b8:51:f9:55:c0:d0:50:5a:29:b4:db:
56:9d:d7:a3:f3:fd:34:2a:52:80:97:85:3f:c3:92:
a6:24:58:54:f0:2b:06:72:58:57:cf:1a:33:6c:1e:
a3:23:8b:39:e5:94:07:6f:55:a4:bf:b6:50:8c:84:
5d:fb:8b:77:4f:1d:9e:fe:bf:7b:87:4c:6f:39:88:
f4:d1:23:14:5c:9b:fc:ef:30:48:29:a1:f2:c0:b1:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:85:A5:BB:06:9B:AA:DF:56:9B:D7:46:24:1E:4A:81:B9:1F:7E
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:b1:f0:fb:cd:a9:76:6a:44:7c:d4:85:59:70:10:de:db:
12:3c:f7:8a:6b:08:e8:77:4e:ba:ca:03:3c:9b:db:59:34:65:
db:78:16:8e:b2:03:e6:5f:0f:97:58:c6:5c:f5:73:b5:f0:17:
44:fd:0b:79:85:d7:1e:a2:4a:bd:a4:37:b7:c1:97:b8:02:18:
50:21:c5:bf:6e:94:4c:27:d9:fa:94:52:d8:af:3f:6f:cd:78:
a9:50:78:68:58:60:0c:d8:da:35:93:db:c6:fe:2f:bf:90:a2:
ac:92:d2:a3:49:ce:ff:97:ff:ce:7d:63:29:2c:00:e0:51:3e:
81:9d:1e:d0:41:98:cd:46:e4:8f:59:9b:e5:d8:6d:9a:1d:63:
b5:09:03:ca:17:39:08:2b:e0:a2:26:34:6d:d1:5a:13:5f:d8:
de:05:66:6c:c7:78:aa:c4:4c:25:04:36:0c:15:14:14:09:70:
b1:73:cc:e5:e1:85:66:33:35:9d:43:5c:e3:3a:69:94:9c:5b:
70:5c:8e:fe:49:43:fc:e5:86:12:7c:53:b2:9c:ea:eb:f9:24:
30:e0:5f:5c:27:99:b3:04:6a:be:5c:6d:d9:a7:d8:a7:dd:10:
2a:11:12:34:cd:a8:2d:30:eb:63:47:4b:ac:c1:b5:7e:e9:8e:
fc:f1:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:27 2025 by rpki-client