Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: 2uakMQ58//ULTs0ubnOv0ac2/vnXuiSWT/+MuIpazGw=
Subject key identifier: 2F:14:E3:B6:51:D4:80:F3:4C:B6:0E:BE:56:66:50:0F:9E:43:40:5B
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0197B6D744ADE651610711B4E86EFABB9B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 114E
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: Bb9pgm8I64v3cjDB26uaceWsBFT7r+KjWVejwKgE298=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:44:ad:e6:51:61:07:11:b4:e8:6e:fa:bb:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=2f14e3b651d480f34cb60ebe5666500f9e43405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:bb:d5:a7:e2:e7:0a:fa:f6:19:40:0a:a3:
61:71:bf:a8:92:25:ae:fb:1e:92:18:a0:da:6d:ac:
c9:f1:d8:1a:7b:7d:b5:99:f6:39:ad:a4:d9:39:8b:
11:4c:4d:a8:87:da:e9:d9:25:9c:30:6f:ce:b6:97:
f0:34:83:b1:fb:a5:ea:b8:75:a5:26:d8:ad:4e:14:
af:fa:48:94:2e:cf:ad:ab:51:41:00:c3:30:5c:dd:
3a:3e:f5:93:b4:1e:ef:78:24:e9:ec:6c:ef:18:dd:
10:a2:e5:18:8b:74:10:0e:0f:9b:36:82:9b:f9:23:
e7:68:af:e0:3b:cb:b2:b7:a6:30:a5:66:3e:71:54:
a2:43:f9:c4:42:5d:a2:28:33:6b:91:3e:d5:be:2a:
23:5e:4f:f1:6f:e4:bf:3f:df:62:40:fe:cb:4d:f8:
11:28:a6:a8:2e:3a:44:e3:29:c0:a8:cf:70:ba:84:
0e:dc:b5:0f:ad:59:86:3f:be:7f:31:cd:e2:5a:5c:
fa:be:e2:94:7f:77:57:da:de:8a:7f:78:ef:8d:c3:
38:fe:d4:ec:a4:17:9d:15:3c:64:8f:9c:1a:57:f3:
12:6c:88:4b:59:53:e4:1b:1c:86:7b:e0:9c:14:ad:
8c:d3:c2:37:03:a5:cb:2a:77:ac:c4:d6:0e:1d:ed:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:E3:B6:51:D4:80:F3:4C:B6:0E:BE:56:66:50:0F:9E:43:40:5B
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:31:8d:da:4c:3e:a9:55:4c:2a:b6:a3:ba:1e:aa:4d:c2:
06:76:9c:5b:7e:e5:f3:e2:db:33:e5:29:66:6b:d3:cd:be:a0:
ee:a3:8c:1d:92:fb:42:17:41:e5:b7:7c:3a:ac:20:29:b8:2f:
33:c5:b8:23:76:d0:39:06:3f:44:30:9e:32:49:d6:00:1c:ce:
24:96:16:8d:bb:d1:f0:49:8e:f0:11:46:ea:10:70:41:cc:db:
4c:4c:5a:ab:eb:9c:37:8d:d9:c5:0a:20:c2:de:b1:cc:93:3d:
ec:a9:a8:8a:d9:e2:38:0b:b3:05:87:03:86:27:71:7b:fa:11:
6b:7d:25:67:89:e2:25:db:c6:70:42:97:a4:10:85:ff:c9:e6:
f3:72:4f:51:13:9b:90:fa:80:bb:94:23:48:fc:68:7e:65:6e:
74:8a:66:b6:d8:92:ea:5f:ea:d7:73:2e:cf:f5:ea:4b:11:41:
db:cf:f2:ba:b0:82:2b:21:f4:b3:03:a1:95:84:29:10:5d:fe:
0a:cb:36:e2:ce:62:4a:a4:d8:d3:df:4d:33:6d:c6:7a:f4:3c:
8c:38:ca:ff:e9:57:93:7b:b3:5f:e7:7c:fe:01:84:91:b8:8a:
12:5f:e5:42:6e:ae:d8:00:bc:5f:33:4a:d1:a6:34:d2:a6:89:
25:be:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:28 2025 by rpki-client