Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: qhidqBOueyMRCf1ZDGhkxFRyshrj5uN/FofsprcLvZU=
Subject key identifier: CE:47:6E:9D:CE:54:15:CA:54:6D:7F:17:CF:B9:A6:5D:7C:A7:A2:69
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019769CE50531CBC0A576E956E13CD8AFA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 035F
Signing time: Fri 13 Jun 2025 15:00:18 +0000
Manifest this update: Fri 13 Jun 2025 15:00:18 +0000
Manifest next update: Sat 14 Jun 2025 15:00:18 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: rNVAr9u746IbgLia57E810QzFA7LJyuJD0PNwVLw/9U=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:50:53:1c:bc:0a:57:6e:95:6e:13:cd:8a:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Jun 13 15:00:18 2025 GMT
Not After : Jun 14 15:00:18 2025 GMT
Subject: CN=ce476e9dce5415ca546d7f17cfb9a65d7ca7a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:07:73:5d:5e:be:cb:7a:cb:51:60:38:73:
d7:a6:a0:c7:68:e0:3b:fb:16:09:08:f4:88:6f:ed:
83:8e:1f:80:f6:f3:03:a6:84:43:c3:14:7e:15:76:
82:ed:87:7c:9f:02:63:ef:45:43:de:9c:4e:17:7e:
46:95:67:f4:01:f6:99:9d:86:f8:da:85:47:6c:4f:
73:8e:32:a7:07:c9:3f:7f:9f:be:05:22:a1:88:61:
48:6d:04:5b:b5:1d:19:ec:a5:01:3c:63:60:43:72:
2f:3a:11:10:71:97:ca:b1:f2:7b:2a:5f:4d:a5:f7:
12:f7:6d:89:72:7f:d7:60:07:9b:2a:5d:93:bd:b0:
02:7d:8b:65:b0:ef:3b:00:df:87:74:08:96:cb:30:
23:2b:3a:68:95:56:79:26:7e:ca:a3:63:9c:15:f6:
1b:21:2c:d5:d1:f8:68:dc:06:e2:cb:ac:85:8e:e4:
8f:11:50:27:65:18:f8:fc:9f:f5:6d:0a:23:f9:38:
d0:37:48:4a:15:01:1a:8f:85:dc:d3:f3:e4:1f:bd:
2b:0c:8f:1b:6c:18:c1:f2:9e:fe:dc:da:5d:38:9a:
a7:60:ef:42:d9:e6:1b:26:35:67:89:c3:b6:66:b3:
ad:b4:c0:67:e2:1d:84:0f:df:1c:9f:2a:33:a5:4f:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:6E:9D:CE:54:15:CA:54:6D:7F:17:CF:B9:A6:5D:7C:A7:A2:69
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:89:0c:6e:68:87:ca:4b:93:64:53:8b:58:75:90:dd:23:d9:
94:d5:fc:3f:cb:a0:28:da:37:d3:25:ca:12:b4:2f:c5:5a:90:
e7:a6:7a:60:cc:63:c9:62:08:7e:f5:08:dc:17:be:44:54:64:
5e:3b:b8:65:df:99:85:4f:8e:36:5d:9b:93:1a:5b:8c:a3:22:
7a:75:a2:a0:2e:cb:fa:2f:65:6c:97:4a:2e:3a:39:0f:33:c3:
cd:a9:6c:96:24:1c:9a:7e:bf:47:92:27:60:00:08:26:72:c0:
07:11:51:d8:b4:0d:95:32:d6:a3:db:ca:8d:d5:11:26:ad:76:
a9:db:96:11:53:18:1c:55:5f:d5:a4:f0:4f:58:79:99:ad:bb:
af:09:c7:a0:b8:a4:98:9b:68:60:cd:ee:51:9e:d3:ec:f1:11:
83:8b:5e:89:f1:06:c4:83:3a:2f:85:25:cf:34:bb:8a:35:8c:
15:16:48:1b:c7:14:7a:f2:e0:1a:7e:9e:e3:dc:49:cc:66:2d:
04:56:49:1c:02:44:23:36:ad:c6:95:a7:fe:d2:8b:1e:e2:cb:
15:a4:7c:1b:3d:e4:0d:42:d8:ff:ba:3c:73:fe:11:d5:6b:24:
ad:7f:97:ce:0b:a5:da:f7:cc:02:6c:86:f1:9f:15:0a:a6:e5:
fe:e4:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client