Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: ldsFWjH6LKTL5ywMGdGrlpoV8XeEQIeddpMU3mSbF14=
Subject key identifier: 76:92:D8:F2:E0:A3:F5:9B:27:92:94:F5:93:A6:6A:CD:DB:96:BC:40
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 01976BBD99B6AF5A2F21E395BF53AA32EB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 064B
Signing time: Sat 14 Jun 2025 00:01:16 +0000
Manifest this update: Sat 14 Jun 2025 00:01:16 +0000
Manifest next update: Sun 15 Jun 2025 00:01:16 +0000
Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: bgoFK5gpTEsp8uGtmw6QcKm9qRZZd6H5vYHFyei97/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:99:b6:af:5a:2f:21:e3:95:bf:53:aa:32:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Jun 14 00:01:16 2025 GMT
Not After : Jun 15 00:01:16 2025 GMT
Subject: CN=7692d8f2e0a3f59b279294f593a66acddb96bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:0e:0f:44:df:b6:8c:ab:15:5a:76:f9:c4:
c0:44:fd:2f:7e:18:75:d7:e3:fe:d9:f7:f6:9c:8d:
d2:90:22:85:af:2c:48:ca:2e:50:e4:c2:c1:76:94:
dd:53:99:3a:42:85:46:30:eb:5c:47:5b:f9:35:da:
2d:e8:09:13:0c:bf:92:65:58:41:83:80:d3:e1:e6:
4d:99:a8:75:16:92:3e:d5:c4:5d:cc:86:0a:e5:36:
e6:af:e0:a6:fe:d4:68:39:3c:37:c5:54:8e:4f:77:
03:5b:13:1e:15:3c:30:00:44:6d:e9:80:69:2d:92:
7d:08:82:c5:fe:ba:20:c3:de:86:22:55:e4:ee:e5:
6e:34:25:63:f0:d5:4b:b5:d8:82:df:1c:66:f5:74:
81:a7:cc:74:97:7a:f2:f0:7c:47:dd:3c:07:92:54:
07:12:66:ab:be:56:95:db:8c:0c:35:05:58:a3:52:
b9:c2:41:fc:09:54:88:b8:db:2c:fb:82:15:f0:09:
e9:13:7c:7b:3f:bb:2b:1f:64:41:24:85:e6:db:84:
62:b9:56:f2:8a:35:e4:8b:34:17:f3:bc:3b:ca:84:
b4:7f:c1:b3:c5:94:88:12:93:72:fb:7a:67:98:ca:
64:e5:d9:f6:9f:af:4f:0b:12:9b:19:80:66:57:b7:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:D8:F2:E0:A3:F5:9B:27:92:94:F5:93:A6:6A:CD:DB:96:BC:40
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:37:14:3a:2d:5e:eb:f6:ae:d7:53:31:11:9c:65:bc:eb:
00:3f:0c:e5:4b:09:5c:40:d7:36:3d:a9:16:80:ac:e1:39:a2:
01:37:c4:7d:d9:b8:16:8e:ae:37:04:6c:fd:b2:f7:6e:47:25:
ac:23:57:2f:31:e3:e3:35:15:8f:4a:33:5a:e3:7a:1a:c8:83:
93:6b:ab:07:7d:9b:c1:be:d5:e8:d5:44:97:43:4a:7f:8b:fe:
09:34:61:7a:33:95:26:80:e2:d3:8a:df:50:1f:56:3a:ea:3b:
83:1f:a0:82:39:88:6d:2a:f7:7f:f3:ab:10:e0:8d:b2:30:f2:
d4:75:5b:94:8d:27:a9:ca:4c:f1:b1:bc:12:19:b4:c2:13:6d:
45:90:25:a6:c5:be:dc:85:58:f6:5a:21:5f:39:02:0e:f3:f4:
84:6f:d8:08:6d:73:c9:15:24:27:81:b2:cf:44:35:e9:32:76:
e8:28:09:9b:f2:e6:c5:f1:d8:e3:95:ef:f6:7a:fc:9c:8f:7a:
b1:19:ac:f5:3a:b3:56:18:c7:23:cb:15:65:95:f1:68:d3:c0:
6c:c9:4d:97:65:06:49:fb:e7:f0:6e:2d:e0:06:2b:fc:f4:53:
62:4c:51:a4:0e:86:55:f6:c7:75:02:48:69:51:b3:51:43:1f:
0e:8f:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:59 2025 by rpki-client