Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier: viT/IUa9QCAxGR5Nz8J1+Ai8YWVjV1cnahhqPhy+X2s=
Subject key identifier: 0F:96:FC:78:9D:6F:64:25:44:B2:D4:96:94:0D:E4:E3:15:CF:B8:40
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 0197B745A5425AE55B00A03C6B66B6D21FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number: 1570
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (hash: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=)
2: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: 3Pu3sORzWqJzqfRNkzwFuifJiWA9q5Am17flx8eSH5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a5:42:5a:e5:5b:00:a0:3c:6b:66:b6:d2:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=0f96fc789d6f642544b2d496940de4e315cfb840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:30:6b:84:ba:95:20:1c:ee:03:0d:72:dc:
1b:59:af:2e:e5:c0:44:1f:6e:76:6b:90:a5:f3:ee:
38:be:4e:02:c4:cb:33:4a:de:ea:8c:38:a8:4f:c0:
94:31:67:d0:61:89:83:72:a4:68:e1:35:f3:f5:96:
d3:50:c0:b4:20:4a:00:be:f0:fb:af:bd:7c:e8:cc:
d2:ab:ef:33:5d:56:fc:da:48:ae:ab:b6:f8:35:e0:
a0:cc:4c:d5:39:43:8c:d8:da:11:0c:24:1f:94:01:
9c:23:62:e1:6d:d1:1b:bd:27:3f:12:3f:ee:87:35:
fd:68:04:79:f1:0e:9f:fb:ab:e5:d0:a6:66:d9:65:
27:83:ca:96:fe:0f:49:fd:fc:f6:15:2e:90:64:e8:
a3:63:49:e0:7c:aa:27:d0:ea:d0:72:b3:28:57:50:
48:ae:13:37:15:c5:6e:db:db:68:09:4a:40:22:3e:
34:50:e0:99:0a:ed:37:7d:e2:97:1e:53:a5:90:c9:
79:ba:d3:99:18:77:ff:85:61:35:ab:9f:4c:a4:6b:
b6:33:9f:34:fd:b9:ee:e5:0c:0c:36:08:25:d6:34:
77:8d:24:e9:f1:56:d4:bf:02:54:03:24:e0:d2:b2:
6e:55:07:04:d5:76:09:82:69:2b:02:fe:5d:c3:39:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:FC:78:9D:6F:64:25:44:B2:D4:96:94:0D:E4:E3:15:CF:B8:40
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:9d:78:20:67:5a:73:a9:f6:3d:36:92:dd:12:a7:1a:c9:
a1:e8:fc:1a:cd:6c:ec:87:c2:cd:85:51:35:f4:58:db:37:8f:
9b:3f:d7:76:8b:bb:a9:88:bc:19:ce:d0:70:13:3f:3a:db:47:
fe:0f:54:37:be:a8:32:53:a5:fd:bd:c6:90:2a:66:59:bb:d1:
76:e3:4f:1f:d9:30:b1:fa:01:11:0f:63:73:26:cf:3d:7e:55:
2e:76:d7:fd:a5:3f:7e:74:cd:6e:a7:fe:b8:4a:d7:9d:42:a9:
fc:0d:9c:0c:89:9c:c2:65:71:64:c1:bd:7f:0c:96:94:c5:fd:
26:75:28:c6:9f:8a:a9:c0:55:0b:b2:6b:1a:54:81:0a:26:40:
cd:74:8e:3d:d0:7a:ea:12:eb:f3:6d:e3:63:62:de:5e:60:a9:
28:df:24:b5:98:53:83:84:cb:4a:5c:ca:4b:60:38:e3:78:49:
59:42:f8:de:da:3c:d4:af:4f:5f:40:02:46:44:8d:44:c2:d6:
31:19:15:37:a7:80:2a:f5:48:7f:b8:e4:ff:67:dd:df:e3:7f:
07:16:fa:0a:0b:d2:ad:97:48:56:f7:a9:be:be:ed:23:be:9e:
84:13:86:8c:b5:c7:7e:e6:62:43:86:55:d6:3c:0d:a6:39:31:
c8:a1:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:37 2025 by rpki-client