Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 7t7+llRxcuWo62ztPUGjU+q8YatQkCucHxtkMMgqobI=
Subject key identifier: 61:66:D0:57:93:77:68:B2:AC:93:BB:C1:35:C3:43:B1:B3:7C:8F:BA
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0197684DDB8DB2ED3387473652B6B97CA259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0802
Signing time: Fri 13 Jun 2025 08:00:22 +0000
Manifest this update: Fri 13 Jun 2025 08:00:22 +0000
Manifest next update: Sat 14 Jun 2025 08:00:22 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: N2PgWjaIgr6qPg1D4tA7GXvsKz8HyCZUIs93hqXSAP0=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:db:8d:b2:ed:33:87:47:36:52:b6:b9:7c:a2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jun 13 08:00:22 2025 GMT
Not After : Jun 14 08:00:22 2025 GMT
Subject: CN=6166d057937768b2ac93bbc135c343b1b37c8fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:4f:82:b8:6a:8a:0b:e3:df:a5:b1:dc:f6:
14:10:a2:9c:46:22:f1:68:7c:de:c0:43:5f:44:16:
f9:69:c1:1c:cd:79:f4:6d:08:e7:dd:b8:a5:0c:2c:
3e:bc:56:ad:a3:58:86:2a:9e:c7:c9:13:c0:4f:e1:
95:05:d9:19:75:72:df:e1:b5:cb:99:c9:89:b4:a1:
be:66:a1:2c:77:e9:77:7e:fa:76:8b:b6:0b:00:03:
65:79:fc:6e:a4:1b:9d:3c:36:92:54:31:9c:ec:75:
7a:c3:b8:72:f1:c2:64:ca:19:27:08:27:e7:85:0b:
71:02:ff:18:b3:ab:cc:93:af:60:0b:2e:58:0e:44:
87:66:bf:c8:e4:79:8f:25:69:23:fe:ee:98:0e:5b:
b1:5f:e0:86:1d:d0:3e:ef:35:c2:4a:ed:b8:25:2b:
90:bd:27:ac:33:40:ab:00:6e:11:c6:64:42:4c:c0:
00:a5:f0:9c:97:a5:f5:f6:e6:0a:96:77:91:14:ca:
3f:98:c7:f7:bd:a9:a4:b1:c0:92:7f:30:5f:79:7b:
bd:5b:5d:45:b2:e2:57:cf:f0:c3:92:14:b2:9e:5a:
49:3e:f0:ec:32:21:1c:f9:9f:5f:b5:f7:d8:f1:74:
1b:9e:09:6a:b7:e0:38:7c:61:3a:5b:74:55:1d:b6:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:D0:57:93:77:68:B2:AC:93:BB:C1:35:C3:43:B1:B3:7C:8F:BA
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:75:d5:b9:34:80:71:02:ed:05:66:0a:33:8f:95:45:38:
36:f2:37:02:aa:f7:a9:e1:66:eb:bf:64:f7:4d:4f:cf:ed:1c:
e2:85:32:cf:76:f0:0e:14:a4:2e:2f:f9:41:08:86:88:9e:76:
27:96:26:e9:3a:d1:85:65:0a:3e:6a:7f:25:bd:c9:45:3b:b6:
ce:43:88:a0:cb:0c:fd:31:33:38:15:32:d9:5c:43:73:13:0f:
20:45:f9:d8:46:07:0b:0a:23:69:6c:8d:a1:0b:e0:c7:86:7d:
71:f0:85:f0:61:80:0c:3c:d4:50:2e:c8:a5:f6:b2:0c:d7:03:
17:90:57:74:50:b0:6a:53:75:0a:bb:7d:29:36:55:de:3d:f0:
fb:99:04:fd:5c:6f:58:ad:1e:ec:63:0e:7b:85:34:64:76:bf:
87:e4:40:d0:e6:59:25:3b:07:a5:12:0a:47:2b:df:de:2b:d0:
a5:de:03:b0:d0:eb:8e:a8:03:36:e3:c8:35:b1:e1:9b:6a:61:
bf:1d:a6:34:c8:cd:92:89:f3:20:64:d8:43:c4:b7:61:8e:67:
86:a4:32:1d:e8:79:30:ff:36:05:b3:12:35:b0:02:0a:88:5d:
46:b2:34:9f:62:84:e8:24:00:4f:fa:7b:bd:75:72:c4:67:9c:
c0:bf:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:10 2025 by rpki-client