Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: dUha6qt9u7mLPxjfIZWb6ZSszoXGp2nPk+1CIluhink=
Subject key identifier: AC:D6:A3:92:5F:10:42:B1:AE:79:1E:C7:06:16:52:98:0B:60:09:CD
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 0197707576C42DB98254DA6846B23874EDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 0FE9
Signing time: Sat 14 Jun 2025 22:00:35 +0000
Manifest this update: Sat 14 Jun 2025 22:00:35 +0000
Manifest next update: Sun 15 Jun 2025 22:00:35 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: znqXnrpaR8C0DU1p3QMN+JdelOC7sSNqd5CW2rra3L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:76:c4:2d:b9:82:54:da:68:46:b2:38:74:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Jun 14 22:00:35 2025 GMT
Not After : Jun 15 22:00:35 2025 GMT
Subject: CN=acd6a3925f1042b1ae791ec7061652980b6009cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:e1:65:d2:99:be:2f:6e:a6:90:d2:2f:a5:
54:25:55:6f:e6:bb:22:e4:fd:14:25:82:07:4a:9d:
bd:b7:9c:1b:df:9d:da:9a:39:83:93:1b:21:4b:12:
de:b7:e0:01:20:ab:20:79:4c:95:1f:2a:d5:03:c0:
1d:bb:46:41:1f:6d:e8:ab:0b:ac:93:67:74:33:ec:
b2:e7:22:d2:ff:74:cd:a3:e4:e0:3d:5a:e9:c6:5b:
90:71:a9:5b:1b:ac:9f:4e:37:db:3c:bf:ca:72:16:
36:27:da:50:d7:d7:f0:1b:d4:20:3c:e0:0b:26:55:
9a:5f:95:15:b6:87:85:7c:c9:f9:6e:be:7d:6d:4b:
8e:2b:c7:90:57:07:b1:05:91:1d:9d:34:83:13:b2:
07:0e:16:6b:b0:67:ad:39:88:fd:0e:6f:ec:c5:26:
a8:f2:91:28:95:4d:64:a3:7a:fd:f6:b3:4d:2b:c3:
e5:ff:f7:f5:15:38:fc:01:90:b8:8b:88:ff:6e:25:
cc:66:4d:b8:26:e4:d1:55:18:d3:c9:2f:30:be:5c:
24:72:53:d5:6a:00:8c:3b:b2:7e:65:4b:99:08:dd:
87:3f:7e:c5:e3:ef:b1:12:a3:6a:ef:ed:59:e9:f8:
0a:f7:e8:c6:a0:74:35:ac:87:b2:86:0e:3d:3a:7c:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:A3:92:5F:10:42:B1:AE:79:1E:C7:06:16:52:98:0B:60:09:CD
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:a8:2f:ca:6b:e6:43:13:4d:7e:75:6c:f0:1f:d0:37:f1:
7d:db:99:67:68:b5:53:07:12:46:7d:47:ce:ef:fe:90:26:08:
02:ef:32:8d:e0:8a:44:28:5c:48:f5:b9:5a:39:11:44:98:cb:
31:15:77:28:65:bf:e4:fb:04:ed:f3:48:7d:97:ad:19:f2:80:
0b:e5:b4:de:a7:4e:ee:ea:d3:fa:73:d1:35:62:db:24:bc:b3:
3a:db:96:74:5d:9a:b8:4e:d2:4f:32:c2:25:c3:38:00:d2:2c:
cc:65:38:5f:08:27:4e:fa:68:13:30:f9:68:26:0d:21:22:80:
c2:62:43:77:1f:3e:4a:52:e2:16:f3:21:95:5c:04:9d:ac:d6:
b8:d8:16:16:b9:82:35:05:c0:62:31:7d:1c:9f:01:dc:d6:1e:
13:63:3d:fd:a0:8b:06:f4:31:eb:44:75:c5:24:43:15:b2:44:
20:3d:db:34:21:ed:11:85:13:93:2d:f3:1a:85:13:2d:f7:7b:
30:23:7d:f3:f5:42:34:3b:b5:39:09:6d:a2:c8:ea:ce:77:8f:
67:75:74:72:69:56:0e:e6:f4:4a:06:2d:a6:18:e0:e0:a8:c8:
fa:7a:bc:99:c8:2e:de:50:6c:27:82:9b:59:3c:78:90:c2:3a:
be:aa:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:11 2025 by rpki-client