Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: QNkHi8EffogiUSwj54ft4rvzjlOE1q/NIKZZTY/TiTg=
Subject key identifier: 8D:86:7F:C7:DC:89:D3:D4:20:9C:4B:26:A9:D3:77:5C:49:E8:04:3D
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019873E32150D159DDC83FE97FDB80D3D018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0D60
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: 88pTXO9YSMD4WPD5HLuvf9+DtaCSXe12cwUI0FuwcBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:21:50:d1:59:dd:c8:3f:e9:7f:db:80:d3:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=8d867fc7dc89d3d4209c4b26a9d3775c49e8043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:44:89:33:29:08:a2:45:41:b3:6c:35:49:
bb:a4:e8:1c:20:cb:bf:b5:aa:92:26:cf:89:b5:27:
04:f7:cb:a9:ba:d6:0a:4d:38:ce:84:1e:a4:e8:42:
a7:6f:36:5f:af:2f:09:ff:91:be:32:f5:ca:1f:78:
e9:19:01:90:63:fc:97:30:6a:07:9c:08:89:bc:ef:
95:14:46:5b:1d:8d:99:22:4b:22:fe:3f:e8:72:44:
3e:0f:53:d2:44:f0:69:a9:ef:2d:03:47:8a:4c:56:
80:f1:1a:45:17:3e:dc:25:96:6b:42:fe:fb:a1:f8:
6d:23:08:4a:4f:a1:55:15:3b:5d:1a:29:be:31:ac:
5d:96:e1:5e:68:c5:de:23:ed:d0:af:0d:99:5e:e9:
53:d5:c7:f0:6e:f2:fe:9a:b2:9e:5e:8f:a3:6b:b5:
6b:a5:54:5f:a5:a3:f8:a6:fe:d2:62:c5:49:77:36:
33:d9:72:79:51:48:78:bc:fc:69:67:a2:b3:d5:3c:
7e:04:90:2e:9f:34:6e:24:e2:15:ad:df:ec:7d:2f:
a9:42:4f:d6:d3:7e:cb:fe:fe:c1:9b:4b:9c:cf:c7:
4c:8f:d8:4c:83:e3:f9:ef:44:36:0b:8c:07:73:7b:
f1:e5:11:ca:3f:9f:86:ae:53:5a:a5:72:fe:ec:bc:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:7F:C7:DC:89:D3:D4:20:9C:4B:26:A9:D3:77:5C:49:E8:04:3D
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f5:cb:86:09:0a:6a:7f:1b:69:7a:44:93:e4:b6:65:84:bf:
0a:a5:82:fa:2f:6a:6c:af:fd:bf:c7:ef:c6:06:1f:bd:ec:de:
e6:9c:e0:d5:93:93:40:7b:80:9a:85:70:08:71:94:05:a5:f8:
d5:14:c7:f6:4b:7f:20:f0:c0:b8:7f:e3:f0:32:f9:54:5d:5d:
a5:82:17:61:3f:91:5f:74:0d:e2:73:2b:b5:a8:3e:2b:00:eb:
30:9e:da:5a:bf:20:9c:7e:cd:62:1b:39:75:13:6c:d6:44:15:
cd:6b:00:9f:81:0e:d2:b8:b9:ea:b0:e6:08:f5:40:8b:34:70:
d2:6f:2a:eb:7c:33:ca:32:d0:e9:0d:d1:90:2e:ae:b3:f0:b1:
2d:79:c8:97:ae:8a:23:c1:a4:6a:85:42:f9:c6:ce:e0:7e:46:
b2:26:1c:cc:cd:b5:51:18:f6:79:71:0d:d0:86:ee:2c:4d:5a:
57:cb:80:00:22:03:b6:17:71:73:cc:2c:44:b7:9b:c3:ec:b6:
71:b0:01:39:a0:c1:d8:d0:f7:eb:fa:ca:b7:51:5b:0f:b0:6c:
15:03:c5:c2:4d:0a:6e:60:1f:f7:86:03:fe:de:dd:14:1c:55:
c7:3c:85:97:55:26:d6:18:cb:c2:7e:25:64:ef:91:da:cf:37:
37:4c:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:19 2025 by rpki-client