Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: VA4G+wYev63c7Y0GK60IIeweR1JZkj1Sm/NCCKOug5Q=
Subject key identifier: EA:E2:39:0C:C2:55:82:53:E5:59:FB:79:5E:ED:6F:38:C3:D4:21:12
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01976EBE364711B0461860C613CE1F6ED57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 0F57
Signing time: Sat 14 Jun 2025 14:00:48 +0000
Manifest this update: Sat 14 Jun 2025 14:00:48 +0000
Manifest next update: Sun 15 Jun 2025 14:00:48 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: wTLapV5/2JvLraCJzXv6vOPn5ZBmE2Oq7FUx0WiDioQ=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:36:47:11:b0:46:18:60:c6:13:ce:1f:6e:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jun 14 14:00:48 2025 GMT
Not After : Jun 15 14:00:48 2025 GMT
Subject: CN=eae2390cc2558253e559fb795eed6f38c3d42112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:72:a2:72:29:22:08:6d:84:aa:af:75:c1:
1d:d4:fe:1d:15:c0:ae:43:e0:fc:96:c5:1f:41:df:
84:7b:b6:5f:4e:d5:53:98:c4:f2:ac:ae:f0:83:5c:
f2:57:3d:82:08:9c:ab:dc:b4:b7:aa:34:2c:59:77:
fb:fa:af:7c:ea:ff:5d:94:88:fe:6c:c5:e0:ae:fa:
9b:88:26:0a:7a:47:67:16:0e:2b:4b:4f:6f:89:54:
8e:f1:d4:8e:6c:a2:01:7d:b9:1a:40:3d:45:0b:72:
a9:cd:36:a6:83:d5:62:09:ed:a1:7d:e0:5c:95:af:
ed:80:79:12:71:38:db:e7:87:ca:61:a1:5d:89:6c:
2c:ce:8d:e3:d1:71:b5:c4:b2:8b:e4:3e:66:d7:8e:
55:d5:77:97:fb:55:d5:86:44:0e:4e:59:89:97:5b:
b8:1e:08:a1:cc:8d:b5:e3:d1:c1:7e:2b:fb:e6:da:
dc:41:48:b2:44:64:d1:f1:14:88:5a:8e:3c:65:a6:
0a:7b:a9:a0:08:a0:b4:77:e9:b3:d1:51:71:c8:43:
5c:d1:3c:ad:6e:67:2f:5a:5b:61:1b:fc:ac:b9:ed:
d9:17:18:b2:2b:7a:75:a5:d7:94:5f:97:a5:bd:41:
dd:3e:4e:c8:ba:76:61:4d:de:4a:eb:f4:46:5e:94:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:39:0C:C2:55:82:53:E5:59:FB:79:5E:ED:6F:38:C3:D4:21:12
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:27:d5:2c:7a:2c:cb:23:32:a6:24:d9:c5:af:e2:97:4f:c9:
99:4b:f3:b1:c0:ca:65:7e:a9:86:4a:4e:92:64:ad:93:23:c5:
fb:ac:9d:02:ed:bd:f1:d9:88:0b:3e:fb:7f:b5:5b:28:30:74:
e0:5a:bd:89:50:11:50:1a:be:dd:dc:6c:75:90:a1:98:2c:7a:
a4:f0:ee:3c:8b:46:57:bc:13:d3:21:d9:6c:62:de:77:9b:22:
78:25:cf:32:04:98:7c:44:db:28:e1:e5:bf:79:7b:2f:d2:3d:
d4:4d:1f:af:94:ac:71:79:0c:72:45:67:8c:3f:74:02:2f:b7:
30:a9:dd:10:3d:ba:d9:cc:c5:24:87:af:f3:9d:7c:b8:52:0b:
d5:5f:46:3e:de:fa:42:53:1f:da:32:46:23:e3:c4:8a:64:3d:
5d:a7:bc:0c:77:1e:15:17:ab:a1:c4:03:6b:77:a0:32:cc:ad:
ee:6a:8b:b6:b2:b6:d4:74:e0:78:a9:00:e0:84:99:ce:bc:0a:
23:4c:b6:13:34:67:64:cd:be:88:6f:59:b8:34:7c:03:51:0f:
c2:00:f2:a4:89:96:2a:c9:22:ba:0c:a1:17:eb:f7:75:82:29:
78:70:cd:f7:cf:dc:b1:bb:4d:b5:4e:ea:ec:f2:3e:05:04:2b:
88:4f:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:33:59 2025 by rpki-client