Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: uggvt4ldMDug7ng13PI1Fqew1q7YZaA3ku9RfjuYap0=
Subject key identifier: 56:E2:15:E5:DF:1A:1B:7D:05:8C:B6:BE:B6:47:A9:0D:95:B3:9F:CA
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019875D04DAC070DC415628F61E293A75BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 01B2
Signing time: Mon 04 Aug 2025 16:00:42 +0000
Manifest this update: Mon 04 Aug 2025 16:00:42 +0000
Manifest next update: Tue 05 Aug 2025 16:00:42 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: WKK22pLEPNBEsGDFIY/J8nLpaPVDeeHt3k9tPTfAZfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:4d:ac:07:0d:c4:15:62:8f:61:e2:93:a7:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Aug 4 16:00:42 2025 GMT
Not After : Aug 5 16:00:42 2025 GMT
Subject: CN=56e215e5df1a1b7d058cb6beb647a90d95b39fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:42:d6:d3:d3:85:50:d8:15:9d:99:40:0a:
67:d5:a3:6e:6e:46:00:0d:ae:3b:f1:2f:61:09:c4:
ad:fc:34:bd:ae:47:b6:05:74:0d:11:90:4c:9f:e4:
e5:48:d4:68:d6:d7:44:e3:7a:eb:91:fb:be:11:5c:
45:0a:2f:6e:19:6c:ad:0f:19:18:6f:45:fd:ec:84:
12:d8:a9:77:e0:dd:7e:f6:9e:7c:58:70:75:78:24:
b3:9d:fd:db:d5:83:5d:84:a6:36:41:ab:85:61:0e:
58:e6:89:8a:df:38:28:51:e7:e3:db:bf:a2:6d:f0:
48:cf:f0:e6:a9:30:9f:da:b3:4a:ae:d5:4b:db:b2:
80:b7:8b:5f:f7:a8:2f:64:3f:0a:d6:ff:e3:0c:8b:
9b:d4:b0:28:64:5a:3d:61:85:36:68:01:ba:5b:53:
25:8e:1d:ef:85:c3:dc:0e:f0:00:29:0b:40:f7:64:
20:90:5f:4e:1b:f1:71:6d:d0:5e:89:63:33:8a:73:
3a:07:22:5d:a5:b6:1d:02:61:5e:ef:f1:74:88:3b:
bb:3a:e4:75:51:f0:ca:6c:48:13:b7:55:ea:0a:75:
59:cf:fa:e5:32:d8:a4:a7:10:37:f4:80:b6:1e:13:
f1:51:d2:9e:c1:d9:cf:ca:d8:8d:52:8d:d3:7d:89:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:15:E5:DF:1A:1B:7D:05:8C:B6:BE:B6:47:A9:0D:95:B3:9F:CA
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:43:c0:34:45:73:a7:4a:2d:e3:04:ec:c1:87:de:48:32:1f:
ed:27:f2:83:06:12:69:18:02:c5:d2:b2:2a:bd:ed:97:23:b7:
a5:bc:1c:9b:2c:36:f1:5d:ad:52:90:f0:b7:28:41:c8:f2:e3:
b6:43:de:fa:dd:62:46:93:45:32:86:45:e4:83:42:b0:91:f2:
23:9c:b0:e1:ec:14:86:94:4c:4a:97:be:e7:c5:ff:0d:78:4c:
2a:31:44:09:0b:87:69:b4:99:b6:c3:5b:2d:2b:16:16:f7:ce:
20:af:01:98:5f:e7:88:7f:ca:c6:86:5f:7f:ee:d7:f6:7e:43:
93:fc:5f:98:f0:11:77:cd:5d:dd:f2:90:a9:99:64:45:07:a7:
ad:49:3d:84:74:bb:04:0f:e0:99:06:79:a8:fd:28:b7:fb:eb:
bf:5b:0d:47:13:b5:cf:3e:2c:ea:69:6e:10:a9:25:19:7c:15:
da:dd:59:40:ff:b1:5e:82:6a:59:5b:8f:45:ec:b0:89:a5:3e:
7a:90:3f:a3:37:bd:33:02:f2:6d:a1:b0:93:47:4e:55:79:14:
f2:6a:d2:c6:cb:09:69:cf:dd:56:a5:2e:23:2c:c0:a7:9a:0e:
94:07:64:41:45:bc:94:31:79:c7:ba:ea:c1:2c:87:a7:85:ae:
d3:bc:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:12:33 2025 by rpki-client