Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: bATo6xLorn99GQESVSAZ4HXRpmy2jTUpAfpmBBoCoKo=
Subject key identifier: 01:38:AC:8F:28:35:47:20:0F:C7:96:52:15:BD:83:D7:0B:90:7D:3D
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01987306F17B1948EBEF7BFFA73A825E08F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:01:31 +0000
Manifest this update: Mon 04 Aug 2025 03:01:31 +0000
Manifest next update: Tue 05 Aug 2025 03:01:31 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: BnBjnKCjeEyeQhX5NJEQ16DEMsCKStnOe86J1472NpY=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f1:7b:19:48:eb:ef:7b:ff:a7:3a:82:5e:08:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Aug 4 03:01:31 2025 GMT
Not After : Aug 5 03:01:31 2025 GMT
Subject: CN=0138ac8f283547200fc7965215bd83d70b907d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:59:30:61:54:5d:51:51:2e:fd:ef:fa:4d:
74:a8:68:b6:4f:37:0c:c0:93:43:98:33:5b:05:75:
b2:08:da:55:ab:1d:be:a5:85:84:9f:27:be:35:84:
87:c4:1c:8a:c2:34:b2:df:1e:ad:24:67:ff:81:3d:
96:f8:93:f0:d3:4e:85:7a:2c:e5:29:ee:a9:e8:1d:
f2:82:82:bd:29:c5:df:41:77:d1:a8:32:c9:df:bd:
98:32:7d:84:ce:be:c2:46:81:64:b6:43:33:35:31:
08:e6:26:70:e9:94:47:24:02:3b:5d:64:98:d4:6a:
63:95:13:ad:18:c8:4b:fb:6a:dc:aa:32:d0:bf:7e:
52:d2:81:8f:f8:63:c1:bc:77:bb:c5:a2:90:66:71:
d5:a0:dc:58:09:a6:8f:c9:3d:b8:bc:30:22:18:db:
37:bc:cb:ac:82:66:1a:86:d4:99:db:76:d2:55:e1:
f5:1c:92:b3:1e:41:a6:cc:8a:7b:21:ec:a6:95:1c:
b5:d3:6a:a3:0d:d2:7c:02:34:3c:7d:30:38:ca:8f:
2a:99:0d:bd:21:76:46:bb:1f:b1:99:4b:8e:2b:10:
96:3f:cc:8b:74:0e:c2:e3:d5:09:9d:df:c8:31:3f:
f0:83:53:b8:1c:7a:29:e6:df:ee:36:3a:4a:57:ae:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:AC:8F:28:35:47:20:0F:C7:96:52:15:BD:83:D7:0B:90:7D:3D
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:aa:ec:38:2d:ab:36:59:fe:3f:62:96:62:10:b6:b0:ae:cb:
10:8a:18:b7:07:6e:7f:60:59:58:e6:68:f9:18:7e:c8:0c:c1:
32:cb:3c:82:07:75:fa:33:1c:85:03:f0:40:28:d1:81:16:14:
8c:5b:cb:ba:68:14:ed:12:b1:d4:16:b1:5f:46:d8:21:83:38:
b3:00:e6:b2:11:0a:e5:da:87:7d:8f:35:ff:4f:d9:cd:0b:e3:
6a:86:de:04:95:bc:ab:bc:8b:c3:61:48:9a:56:e3:ac:70:48:
0e:17:3d:9b:57:09:53:05:7e:12:57:70:52:33:01:ef:bd:e7:
54:ec:75:8e:8a:6a:9f:8e:e1:3c:c2:e6:c3:d6:97:b8:aa:13:
89:bd:8b:f0:42:24:16:e5:4e:aa:be:0e:be:4c:a1:1d:f8:74:
35:ea:53:89:a0:25:75:09:cd:e1:78:4e:8f:33:69:25:99:27:
be:f2:09:f3:9a:2f:6c:0a:ad:b9:55:16:9f:a9:0f:e2:ab:74:
ed:20:54:19:35:34:0a:34:03:76:b4:47:45:fc:2c:53:8c:b3:
de:a8:76:5b:01:67:86:7c:ed:0a:7d:d1:1a:1a:25:60:32:0f:
14:35:ce:ea:04:ef:3e:f9:35:f9:1d:55:30:8a:d5:ab:8d:5a:
53:9f:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:22 2025 by rpki-client