Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: dXBUIceHlFvhEYrkzGaVoBecoB/g7cLirhIWfAN6l6o=
Subject key identifier: D0:37:B5:0A:8C:E8:A8:AA:1F:F8:DF:B0:99:75:B7:C8:AE:16:4E:F8
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019769CE664733AB633622DC1C0C66AC307F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1289
Signing time: Fri 13 Jun 2025 15:00:23 +0000
Manifest this update: Fri 13 Jun 2025 15:00:23 +0000
Manifest next update: Sat 14 Jun 2025 15:00:23 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: ZvlwzWw/nC5Jp1E9x2M0Q6WCLnkBGswP0f0TFjzDOXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:66:47:33:ab:63:36:22:dc:1c:0c:66:ac:30:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Jun 13 15:00:23 2025 GMT
Not After : Jun 14 15:00:23 2025 GMT
Subject: CN=d037b50a8ce8a8aa1ff8dfb09975b7c8ae164ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:41:3d:c1:92:3b:53:98:fa:e3:bf:ee:85:
f3:67:f4:40:35:d3:b6:4b:fe:8e:29:d1:67:c4:4a:
0b:ce:5c:49:d0:2b:ab:27:06:5f:dc:63:65:13:ff:
ce:19:3b:52:77:73:ac:c3:a9:2d:99:a1:56:5f:25:
f1:31:3f:0d:3d:89:62:10:79:ec:67:ff:fa:99:dc:
63:0b:44:c8:18:34:64:72:04:8e:de:8d:a6:b8:26:
42:54:00:8e:51:74:2e:fc:86:3b:3f:54:fd:53:ca:
a0:bf:63:c8:b7:96:47:31:13:b3:a8:db:67:f1:2b:
b2:8e:d7:68:b9:b3:27:71:4e:62:d5:ef:2f:b4:7f:
d9:6a:06:e9:fd:47:af:e7:e6:be:d6:a9:b2:f0:52:
03:6f:85:af:68:ca:f1:06:51:3f:0a:26:27:e2:55:
ea:5f:80:5c:ff:85:f0:1c:e7:f6:12:34:e4:11:b0:
70:39:b3:0b:64:34:e9:51:b8:88:3a:c1:82:56:28:
52:f8:28:8f:47:85:84:77:75:0e:92:b8:1d:51:a1:
f5:04:a7:aa:23:32:26:d8:ac:f1:49:34:f8:e2:1a:
d7:14:d4:7f:6d:50:6e:e3:1c:48:ee:77:4f:a7:90:
6a:22:88:03:9e:0d:12:2b:fd:28:2a:54:35:56:fa:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:B5:0A:8C:E8:A8:AA:1F:F8:DF:B0:99:75:B7:C8:AE:16:4E:F8
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:a6:89:46:fb:ae:e0:96:34:1a:b4:51:4a:9c:71:fd:8f:
07:48:73:c5:b4:69:1e:7e:a2:ec:57:e2:49:68:6e:ca:44:ab:
93:c6:2d:ac:86:f9:ae:30:92:fe:78:60:be:2f:8b:12:1c:9d:
6a:d2:57:56:68:d8:5a:49:ee:e1:2c:9d:d7:49:34:9a:06:20:
85:fd:ed:f6:40:9e:9c:6f:5f:c3:e4:c3:36:e7:95:cd:9d:8e:
53:79:53:66:bd:94:1d:53:c8:70:8b:3f:18:a4:d8:53:27:e7:
ce:c5:64:f7:f8:d2:6c:c1:83:75:5c:d9:33:f5:3d:b9:45:ce:
d7:4b:22:69:76:2c:3d:74:a3:66:72:b1:6c:95:68:eb:6d:c4:
72:cf:85:52:04:34:7f:74:54:8c:74:0c:12:cb:39:dc:13:89:
6e:b6:8a:14:50:76:da:45:81:a7:bf:b6:b3:30:9b:d2:ef:36:
7d:96:fc:f9:0b:01:6d:35:a0:91:5b:e0:39:31:1b:a3:40:97:
41:35:35:7a:70:06:7c:87:e6:e0:9b:fa:03:ac:c5:a0:da:91:
94:36:b4:5e:7d:2e:1d:37:7d:54:dc:f7:7b:64:df:83:d8:67:
d4:59:8e:ba:b4:1c:97:d8:ed:92:e8:45:fe:f1:d8:3d:45:d3:
2f:6d:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:05 2025 by rpki-client