Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File: lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier: tUkztxS0IgNkKeE+/EYOF3iWcRbFCWuK/pl5mC00j9A=
Subject key identifier: B5:88:7E:27:3F:C3:24:DC:17:CA:75:05:BB:FD:12:39:72:DA:97:E6
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer: /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial: 0197715123AF54AB211C78A51E4AD2D6D62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number: 0413
Signing time: Sun 15 Jun 2025 02:00:32 +0000
Manifest this update: Sun 15 Jun 2025 02:00:32 +0000
Manifest next update: Mon 16 Jun 2025 02:00:32 +0000
Files and hashes: 1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: /mBAay9f2NEQBNh27LbjIITnnNh04KxFLLqE/Xynn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:23:af:54:ab:21:1c:78:a5:1e:4a:d2:d6:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
Validity
Not Before: Jun 15 02:00:32 2025 GMT
Not After : Jun 16 02:00:32 2025 GMT
Subject: CN=b5887e273fc324dc17ca7505bbfd123972da97e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:79:72:46:14:88:72:39:2e:62:46:61:9d:
60:99:b4:f2:52:71:32:c7:06:cb:d9:ff:16:01:b8:
3f:c7:c3:b9:1d:5e:38:0a:53:e6:0f:cf:81:2d:20:
66:b8:71:63:95:9f:82:3e:8b:dd:10:f1:67:e7:ae:
ef:41:15:04:03:ba:78:02:0d:77:ba:14:cc:29:cb:
0d:23:b6:75:96:8e:71:4d:c4:d0:dd:59:23:a7:1f:
eb:20:1d:cc:f6:56:3b:5e:72:94:f5:c5:ea:75:52:
d6:5b:dd:68:4f:11:88:f6:6b:7e:61:d0:6d:12:1a:
b9:59:0f:a8:ae:ad:16:a6:1e:a9:f2:fc:a4:2d:16:
c4:b5:f1:c2:bb:26:d8:c9:12:b9:80:5e:6a:74:4e:
32:fc:bb:ed:35:a4:cd:f1:be:b6:bf:5f:94:0b:45:
ac:43:0e:1c:f3:ae:42:c0:86:f4:be:70:6e:05:80:
8b:d5:7a:6b:0e:b7:65:7f:6d:93:d4:16:de:87:ba:
9e:c8:d8:ec:98:39:19:98:62:55:59:67:21:17:d1:
38:ea:8b:93:8c:a5:7d:81:7e:9f:21:73:c6:38:f7:
1b:9a:e7:3e:9c:d7:bc:8e:cd:32:76:ee:55:cb:60:
e6:48:32:98:72:e4:09:80:5d:a2:1c:26:34:5a:d9:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:7E:27:3F:C3:24:DC:17:CA:75:05:BB:FD:12:39:72:DA:97:E6
X509v3 Authority Key Identifier:
keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:da:55:04:15:ec:12:fc:d2:66:33:b8:57:a0:ee:a3:3f:
a2:2c:4a:ac:3d:32:2f:2d:ea:27:66:d8:b7:f6:48:29:a4:75:
17:44:e0:a2:57:dd:3e:5f:5c:f3:cc:de:6e:bb:51:3f:cf:c9:
30:57:50:13:75:b1:2a:d7:ee:ca:6f:55:1f:9b:ff:5f:d6:67:
99:53:e2:3d:01:5d:6e:22:23:64:e1:aa:18:a1:87:43:ac:0d:
32:3c:39:bc:32:f8:b2:b6:be:cd:31:e2:6b:73:6d:c4:fd:a6:
55:d8:c0:f7:75:f5:23:1d:ef:18:f2:f6:47:8a:ef:14:11:f1:
62:11:33:2e:db:ef:0b:42:e7:25:dd:75:ad:d4:db:39:69:d8:
aa:a2:75:c0:57:99:22:ed:8b:3c:7c:33:60:5c:7b:f1:62:ef:
54:10:81:65:a6:8d:e4:46:2d:7d:82:7d:7c:30:dd:21:b7:20:
8f:1f:4e:17:fc:f0:1d:42:f1:3b:d0:04:8a:9d:f4:39:3e:39:
48:af:f7:4a:b4:93:76:57:3d:3a:4f:ce:e8:98:3f:a2:b3:b1:
ca:f1:2a:40:f2:d2:ab:82:ad:4d:92:39:4c:29:ca:cc:76:20:
be:b4:0d:f5:d4:58:d0:48:cd:ab:f2:10:4b:55:39:72:8c:c4:
24:fc:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:56 2025 by rpki-client