Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: 76UDKpJyioAn4SIZRE0QdyQXZKjw6R73lfW5BVOTjf0=
Subject key identifier: 80:91:6B:04:DA:C5:87:3E:EA:A8:A1:8B:66:EF:2E:F4:88:63:5C:9B
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 0197707538B948FE0AAF11EC0CD93EB7C1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 03DB
Signing time: Sat 14 Jun 2025 22:00:19 +0000
Manifest this update: Sat 14 Jun 2025 22:00:19 +0000
Manifest next update: Sun 15 Jun 2025 22:00:19 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: n86I26a5cyfttf50ZV4AxEOqDBu0nGQR49TZgERJxnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:38:b9:48:fe:0a:af:11:ec:0c:d9:3e:b7:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jun 14 22:00:19 2025 GMT
Not After : Jun 15 22:00:19 2025 GMT
Subject: CN=80916b04dac5873eeaa8a18b66ef2ef488635c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:09:50:96:dd:c5:47:7b:5b:f6:d2:0a:54:
95:13:76:ae:53:fd:6f:bf:df:4b:98:7a:7c:09:89:
46:9c:15:bf:aa:32:dc:d7:5d:e8:5a:8f:46:c0:9d:
2c:cb:61:c7:54:1b:28:c3:6d:87:bd:03:6b:5f:88:
e5:6b:2f:e4:4c:15:2d:ef:80:54:ad:0c:01:a1:1d:
8a:16:5a:42:c2:7f:bd:50:50:ee:cd:30:76:a6:09:
5b:c9:a4:84:d0:50:43:06:ed:fe:ba:35:29:2a:c9:
b2:b0:ef:cf:6c:b0:aa:44:4f:e3:65:c6:0b:8b:e9:
81:fe:10:a4:19:9a:81:10:59:a3:ed:d6:6a:d1:9e:
95:20:7f:1f:bb:8a:98:ac:10:22:e3:91:6f:10:7a:
00:f6:f8:2d:b7:39:b1:a4:47:85:ef:d4:62:f4:9e:
a5:00:51:07:59:10:fd:4a:2d:7d:2a:bf:c7:79:11:
7d:c9:85:c1:da:ee:d8:eb:13:c7:34:d4:91:9d:6d:
aa:9c:73:6a:b2:e7:7a:2c:64:14:50:c0:54:47:0f:
f3:e7:40:61:84:9a:e8:a8:6e:b4:07:a7:9e:38:04:
85:04:0f:50:8c:68:2c:aa:65:b2:57:7a:28:46:a6:
89:e7:0c:02:73:e6:20:ae:65:ca:f4:8d:b2:06:00:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:6B:04:DA:C5:87:3E:EA:A8:A1:8B:66:EF:2E:F4:88:63:5C:9B
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:7f:1b:33:a1:62:c7:1b:da:ca:38:09:97:01:84:3f:d4:
4c:fc:dd:f9:57:27:ab:6f:76:20:21:41:79:78:7a:a6:a7:ef:
47:45:c6:c2:f8:7d:7d:14:ee:e5:59:4b:f2:a6:bb:79:e8:60:
44:ad:23:4d:ea:2c:91:ac:ae:84:b7:27:bb:8b:25:3a:03:15:
ec:b5:e6:2b:a2:e0:00:fc:e7:8b:0f:45:94:b7:c1:28:21:46:
93:f8:a0:bc:a8:c0:4a:a8:0d:4f:8a:7f:53:b0:79:d1:27:01:
88:6b:0c:d6:9b:16:42:0e:5f:ad:c7:0f:cd:5c:94:c0:d5:1d:
7c:ef:dd:bb:e6:43:be:a4:d3:b9:96:18:35:11:a5:96:b0:49:
fb:8e:0f:9a:87:66:77:4a:eb:47:03:c1:49:90:b9:1d:e3:f5:
a5:67:82:a0:d3:2a:69:24:23:85:bc:68:98:33:0e:20:b7:b4:
52:42:82:29:c3:49:4b:29:16:4a:65:43:0e:af:60:c9:62:9f:
03:be:a8:7a:9e:b3:26:b0:74:e6:86:02:bc:32:01:71:3f:7d:
20:98:61:65:27:f4:be:a4:1f:6f:c7:82:5b:cb:31:ab:9b:f4:
b9:02:3b:55:69:b4:b4:01:95:29:70:27:e6:a9:01:94:8b:65:
a7:e5:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:53:28 2025 by rpki-client