Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: NhPzgdMz3trFmM4io6mnSWBZ/LZlXIPiamtFL0yjcEo=
Subject key identifier: F4:FF:DF:0D:52:3B:8A:83:72:23:BD:F4:27:B8:3D:99:74:1E:89:7D
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 01976D748296C4F32445512E31FA9B182F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:41 +0000
Manifest this update: Sat 14 Jun 2025 08:00:41 +0000
Manifest next update: Sun 15 Jun 2025 08:00:41 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: PI0sctbvEzAtxBUNxsieVt/2SgjRdOnEs4XNJK7dqf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:82:96:c4:f3:24:45:51:2e:31:fa:9b:18:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jun 14 08:00:41 2025 GMT
Not After : Jun 15 08:00:41 2025 GMT
Subject: CN=f4ffdf0d523b8a837223bdf427b83d99741e897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:d8:c7:14:f4:ab:78:9b:af:ae:7b:65:5d:
3f:76:9e:b0:cf:75:a1:0f:fd:d8:6c:84:d6:78:fa:
15:a2:d3:e0:bc:86:ce:9e:e0:bb:c5:c2:e7:1a:5c:
38:3e:1f:43:d7:8d:55:af:33:8b:b4:3f:22:33:7f:
cf:e7:a9:23:2d:6c:70:8b:b0:a1:a5:4c:b9:b6:74:
47:85:8b:3b:5d:7e:10:25:e0:e8:d3:54:9a:70:03:
8d:e6:73:af:9a:00:dd:b4:ae:5f:2c:c1:66:d7:ab:
24:7c:b6:8c:b5:3b:96:ee:f5:f9:a0:09:e7:58:96:
88:a1:97:2e:d5:67:03:98:06:83:54:32:2e:de:1c:
ff:7c:8c:d2:32:1c:57:d0:b9:b0:bd:c4:22:a6:19:
20:bf:2a:1a:06:aa:bb:83:c9:f3:0e:18:89:3c:81:
65:29:66:fe:fa:24:75:12:68:56:ab:9c:41:a2:02:
44:76:bd:27:fb:26:85:65:0e:01:63:12:20:47:8a:
3e:e7:3e:e2:80:a1:8e:6a:5f:48:8a:c2:19:3a:80:
33:e4:fd:f0:d8:78:a4:97:04:a8:58:08:e0:b9:7c:
d0:20:b5:82:c1:0e:f5:d5:3f:ce:18:c8:a2:b6:74:
b0:b8:16:ba:19:10:56:9d:48:64:2b:64:9f:0e:ee:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:DF:0D:52:3B:8A:83:72:23:BD:F4:27:B8:3D:99:74:1E:89:7D
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:b8:ad:f1:bd:2a:a0:ec:c9:37:6a:63:f7:d6:7c:bb:61:
f3:1b:6c:b8:f2:ac:73:bb:d7:4f:cc:14:3e:09:67:db:fe:e6:
07:f2:ad:6e:f6:f3:06:b2:00:95:a1:29:a2:63:5b:4d:72:86:
a8:e0:28:d8:1a:57:5c:25:72:15:46:55:ce:76:1b:c7:e5:19:
95:2c:a4:a7:96:73:51:64:27:67:bd:3a:d0:19:d6:72:87:18:
23:71:8c:78:85:0e:19:3f:55:95:dd:fc:f0:4a:23:54:43:a8:
f2:05:e0:3f:bf:ca:ab:79:ef:99:6e:5c:0f:09:0b:6f:f6:3a:
14:e8:a2:56:33:82:69:e2:61:fc:79:36:a5:4f:36:8f:76:6e:
49:61:31:72:02:2c:08:24:66:66:e9:20:e8:8f:6e:06:6a:a7:
02:e3:d2:2e:f6:fc:8e:18:a8:0c:fd:74:17:82:7f:d9:05:77:
30:fe:4f:fb:e6:c3:21:2a:d5:70:07:2b:78:3b:1c:50:c0:42:
44:57:0c:19:d7:9c:94:01:f4:18:2d:6e:12:ca:78:a6:2a:88:
0d:fc:21:96:27:a8:e4:c4:b0:af:2e:a6:5f:da:f9:d9:bc:09:
ff:af:42:f3:62:e6:67:2f:65:b9:f0:32:d5:7d:81:3c:23:d2:
00:d3:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:34 2025 by rpki-client