Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: ficGyQHL/qQPy2Ip0NOWzuXgTQZ/oKMbto67DpwjPIY=
Subject key identifier: 36:BB:A6:92:DD:EF:CF:C9:BC:8F:CB:31:9C:1E:86:4D:97:89:38:9A
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019769608D4DEDC4A4390DC9A558153310EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 13:00:24 +0000
Manifest this update: Fri 13 Jun 2025 13:00:24 +0000
Manifest next update: Sat 14 Jun 2025 13:00:24 +0000
Files and hashes: 1: L7Ga4vuHYQeZfIto9Yq8tgXI9O0.roa (hash: teLoUEZvE4nl+9Xvo/9jLeTnZ41UIdxLpAcgTrbJ4sA=)
2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: sLaOaY66dJapo2Ag0dF8M6GEVccZlCjK0S0KLeraOcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8d:4d:ed:c4:a4:39:0d:c9:a5:58:15:33:10:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Jun 13 13:00:24 2025 GMT
Not After : Jun 14 13:00:24 2025 GMT
Subject: CN=36bba692ddefcfc9bc8fcb319c1e864d9789389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:86:09:6f:4a:68:e4:d8:d5:96:73:a0:96:
2f:dd:2d:ad:92:7d:de:53:d5:c8:a9:60:80:41:41:
c0:69:94:01:6b:fb:61:e3:ed:57:de:d8:53:39:8d:
b1:78:72:a4:5c:bc:29:6c:fb:33:27:32:5e:cb:f7:
9f:83:02:d9:88:4e:a5:9d:b9:30:87:58:7d:9a:da:
61:1e:4d:67:c2:b0:5e:96:1b:fd:08:dc:69:ef:df:
8f:f9:ca:9f:60:37:5e:cf:a5:b1:e7:c3:b2:e2:f7:
6d:1e:f9:ff:ee:4f:fa:e7:59:f8:df:99:0f:a9:d4:
5d:a8:00:b0:b4:44:62:08:3c:84:7f:2b:75:b6:9e:
c3:8e:85:5d:4d:7d:d8:e3:7a:16:c0:6b:2f:6d:ce:
42:b8:56:b0:5f:59:8c:b5:36:00:46:d2:07:db:67:
01:9f:72:71:65:a7:4c:8c:2e:6d:a6:a6:4e:7c:9d:
88:84:f7:85:72:f5:d6:d6:c5:13:e4:44:12:33:3e:
f7:90:d5:09:46:a1:cb:f8:62:4e:8c:8f:d0:e8:87:
1f:bd:43:67:ff:d5:42:d1:89:9e:f3:f3:c3:44:9f:
32:fb:b9:12:4f:59:25:66:2f:78:03:01:7e:58:65:
86:e8:47:8e:7e:60:17:43:e4:56:66:bf:29:38:62:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:A6:92:DD:EF:CF:C9:BC:8F:CB:31:9C:1E:86:4D:97:89:38:9A
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:3f:97:69:61:a9:1a:b8:09:1e:06:54:69:f3:00:26:4b:
d0:0c:5a:87:c6:16:53:41:cf:19:35:c0:bf:2c:25:fd:12:6c:
0c:a7:5e:00:0e:21:c9:d5:fb:e2:a0:c8:2c:5e:11:d4:95:ae:
e9:01:f1:c5:67:5d:5a:f6:ff:3a:fa:19:51:1e:b2:59:55:d3:
e3:ab:dd:89:b2:6e:11:8f:ea:07:e5:93:84:e2:98:81:ce:c5:
a2:34:8c:d3:2e:10:34:a9:45:9c:25:c5:3b:19:8e:0e:b9:35:
6d:7a:ec:a4:3b:d5:03:ec:81:3b:ec:5b:9a:70:92:65:60:ac:
cc:16:31:94:ad:c7:2a:c7:cd:b4:31:c2:f5:41:19:3d:89:54:
5c:87:57:f4:11:19:95:c7:0a:d3:8a:78:4c:6b:06:90:01:70:
86:0e:e1:7c:88:43:aa:89:62:00:bb:c6:27:85:7d:05:90:a6:
f5:af:57:bc:44:d4:84:32:d1:45:e1:e7:2d:fb:ba:25:84:77:
17:7d:f9:90:ca:f6:bf:46:c7:59:f8:db:5f:83:c5:b7:36:6b:
5c:30:fb:c2:62:14:40:9c:e0:41:0d:f3:c8:34:3b:6f:94:e5:
ba:69:51:d2:6c:fe:e3:5d:9e:ec:6f:17:43:61:53:67:74:ac:
17:c8:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:08 2025 by rpki-client