Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File: lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier: 9/ctnj4oWih/MtvlJ9cbsfaMY7zQtcAwkI5/rNF7oKQ=
Subject key identifier: 7C:C3:7E:66:D3:E0:0B:91:0B:FD:FF:C3:02:E1:22:4D:D8:3D:25:D4
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer: /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial: 0197819FDB0C6EC4308AA0446ABC7821BDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number: 0CF9
Signing time: Wed 18 Jun 2025 06:00:26 +0000
Manifest this update: Wed 18 Jun 2025 06:00:26 +0000
Manifest next update: Thu 19 Jun 2025 06:00:26 +0000
Files and hashes: 1: kBsht6KNIVIdqBo-LjM3rdj9_48.roa (hash: yvy0FENQOdTgUPrF3X0q20Rd17JBcuTbTmhNZ8raWkU=)
2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: IpPYrcQt2SlHuyaewXrMC2qWNLHKqxI5OOuhXs3s1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:9f:db:0c:6e:c4:30:8a:a0:44:6a:bc:78:21:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Validity
Not Before: Jun 18 06:00:26 2025 GMT
Not After : Jun 19 06:00:26 2025 GMT
Subject: CN=7cc37e66d3e00b910bfdffc302e1224dd83d25d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:20:1f:83:c6:6d:c1:31:a8:94:56:de:9d:
3d:8e:e1:bc:6d:fe:5a:3e:82:42:be:13:f9:97:62:
92:36:05:1b:3c:2e:63:81:fe:ad:b4:cf:89:48:91:
9d:b4:4f:9c:c6:26:b3:5e:94:fb:c1:66:84:00:d1:
dd:51:f5:ba:6e:96:7b:fb:4d:6c:85:6f:be:f1:48:
e4:9b:91:79:48:3a:19:bd:82:03:60:ca:91:13:fa:
66:04:29:44:d4:d1:f9:33:66:fb:92:e6:8d:32:d5:
45:48:dd:e9:e8:0c:f4:53:de:71:c5:db:d3:86:12:
fc:40:c4:fc:60:0a:be:43:79:54:91:51:60:df:4a:
9b:fb:d0:57:ce:53:47:8c:8d:b9:dd:d4:f7:0d:4e:
05:52:d5:62:a6:78:37:69:97:7e:a1:63:17:1f:58:
08:98:88:b9:e5:f5:aa:12:0d:16:4d:8a:bd:fc:fa:
a0:66:9b:8d:4a:f4:03:e5:ec:0b:86:b3:06:cb:d3:
6f:8f:97:13:8e:56:a4:f6:84:20:6f:0d:74:dc:aa:
85:b8:44:0b:7a:b4:49:2d:7f:3c:36:c5:bc:c7:49:
05:68:7a:6a:2f:fb:f8:f7:2b:f5:e3:ea:77:78:55:
53:b6:59:fb:db:36:65:ae:7d:19:b0:80:84:bb:c9:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:7E:66:D3:E0:0B:91:0B:FD:FF:C3:02:E1:22:4D:D8:3D:25:D4
X509v3 Authority Key Identifier:
keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d0:a6:23:f1:84:5b:c1:b1:3f:c3:ac:37:cc:c3:2a:ba:1e:
1b:66:33:8f:b0:46:65:ad:25:a0:a2:45:56:a6:1a:c9:d7:a6:
cf:32:82:31:df:e9:90:53:65:3e:56:0a:e6:93:7e:ef:3d:b5:
30:82:f4:9e:48:1d:21:18:7a:06:92:a4:56:f7:65:2e:aa:2a:
ac:cf:64:1d:49:07:c4:f2:6f:07:f9:08:f8:0e:e0:9d:b3:8e:
c3:de:05:60:81:f8:08:04:c5:e5:e0:a1:88:06:09:1b:f0:16:
4d:8f:6a:d9:29:fc:f8:72:57:73:8d:64:0e:65:26:4a:84:45:
11:c2:9d:d7:6d:5e:2c:a5:5d:c6:f9:05:c1:0c:9f:d9:90:6e:
90:10:85:df:7b:eb:44:5a:72:80:62:03:68:de:58:24:ec:ff:
d4:d9:74:ca:46:c5:9a:5f:e1:16:3f:15:42:d5:0e:39:c6:32:
78:6e:60:25:64:6c:12:0f:95:4d:15:e5:0c:e4:ee:8c:dc:33:
49:e1:0a:ee:0a:5a:41:e7:67:66:5f:7a:d3:06:f2:c1:5a:fd:
c1:ca:bb:72:28:ec:75:1c:cc:73:da:8c:98:67:2a:37:22:0b:
2e:14:58:42:66:d3:f3:b2:a5:3e:3f:67:be:82:bd:30:b0:ca:
06:9e:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:51:03 2025 by rpki-client