Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: YsLgcQcyAdAOghEMgq4iWEu5jEZA2SeHqzWM2VyeALQ=
Subject key identifier: 0D:90:CD:7B:27:DC:57:1B:C5:E0:F6:7D:55:45:E8:A8:8C:DB:98:9A
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 0198824283ACE4F4141DA260F0D8173FE4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 028D
Signing time: Thu 07 Aug 2025 02:00:53 +0000
Manifest this update: Thu 07 Aug 2025 02:00:53 +0000
Manifest next update: Fri 08 Aug 2025 02:00:53 +0000
Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: IRH0P3IOqdvh9kGCKY5Vlv0UkGSfwqq3RIiOvCQUN54=)
3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=)
4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:83:ac:e4:f4:14:1d:a2:60:f0:d8:17:3f:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Aug 7 02:00:53 2025 GMT
Not After : Aug 8 02:00:53 2025 GMT
Subject: CN=0d90cd7b27dc571bc5e0f67d5545e8a88cdb989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:5f:27:24:1a:71:a0:8e:42:f6:df:21:46:
14:3e:1f:e8:7f:e0:8a:86:ef:e2:18:f1:68:80:9a:
91:fa:39:b3:ba:85:9b:3e:da:16:58:1e:f3:6c:c8:
fa:ac:fc:92:30:27:8b:29:6d:34:97:0f:2a:79:6d:
8e:a7:04:9d:7d:e9:d4:a4:4c:05:63:fc:b6:76:db:
38:fd:35:fa:e9:b5:63:86:37:d3:ef:c5:0e:a2:37:
13:47:7d:5f:16:16:18:e3:5d:1a:73:5e:98:57:70:
a6:e0:92:f2:98:b9:66:69:ce:78:ec:d3:65:0c:3b:
9e:b9:5c:fa:ff:2e:65:cc:f4:9b:4a:56:8c:f6:36:
aa:e5:6f:e4:fa:5f:a6:da:b6:4c:af:21:4f:78:63:
c6:af:30:fb:ec:39:75:58:01:53:b2:3f:f8:f2:e8:
4a:7d:f1:5e:20:f8:50:68:98:63:af:e0:14:65:d4:
6a:0f:48:bd:a4:49:e3:4e:4b:d8:80:a2:0d:d4:c5:
94:d8:9d:ac:1d:bc:b9:36:39:2e:d9:d1:2b:0c:16:
be:c5:11:5d:0f:77:26:1b:b7:9b:00:d1:df:8b:c8:
77:5b:be:da:d1:11:05:10:4d:dd:04:ec:4c:14:cf:
77:59:43:41:01:4d:c9:5e:69:8c:71:79:c4:42:76:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:CD:7B:27:DC:57:1B:C5:E0:F6:7D:55:45:E8:A8:8C:DB:98:9A
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:f9:74:1a:af:02:43:4f:f4:e0:e8:71:6c:f9:fe:48:c4:
2c:17:6e:5f:4c:98:b7:ec:14:ab:02:38:a7:a3:d7:0f:7d:37:
c6:55:66:d4:96:12:70:e6:e7:6a:e1:d9:6b:8c:b1:a1:55:9d:
62:cb:09:5d:ad:5a:ee:50:58:b1:79:60:41:82:82:ea:c7:26:
34:dd:09:5b:b5:8f:60:1d:3a:ea:91:2e:79:68:55:62:3b:a0:
0b:12:c7:8a:a3:08:b6:7a:0a:bb:cf:fe:fc:c6:be:1b:27:07:
fd:9a:d6:8b:fc:22:56:40:cf:08:78:14:e0:93:60:c5:7c:5a:
f9:e4:33:c4:19:21:3b:9f:2b:f7:1e:42:36:10:d1:c3:f3:da:
e3:30:e9:58:46:3d:4d:93:d1:61:35:28:de:33:3f:44:9b:e9:
a7:29:29:35:5b:b6:fa:82:2d:10:75:0b:27:f4:6e:23:e4:ee:
08:3f:8d:2e:8d:6d:a5:2a:71:42:fc:8c:c2:c9:af:bc:0b:b2:
c7:74:b8:6a:82:e0:7d:9e:38:a5:c4:a5:6d:b8:36:39:35:59:
45:86:02:12:cb:50:b4:8e:f9:67:e4:1c:07:3b:60:b7:4f:55:
df:a0:56:bb:a6:da:3b:61:df:38:1a:43:5d:35:f4:78:52:27:
7a:db:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:02 2025 by rpki-client