
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: RsZyjxaBJtl0n/g7xOG6QHRVwUaVNu4KMe6FwFluHCc=
Subject key identifier: 68:EB:B2:92:5A:B8:3A:91:3B:56:DC:18:80:13:40:95:26:15:02:B9
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019872CF764CD68EEC98CEA4DDF50B7B2459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0289
Signing time: Mon 04 Aug 2025 02:00:55 +0000
Manifest this update: Mon 04 Aug 2025 02:00:55 +0000
Manifest next update: Tue 05 Aug 2025 02:00:55 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: bwAGkKfwAswUgFOBaUUfzxE7RgXI3MFmNAQOpqH3MMg=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:76:4c:d6:8e:ec:98:ce:a4:dd:f5:0b:7b:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Aug 4 02:00:55 2025 GMT
Not After : Aug 5 02:00:55 2025 GMT
Subject: CN=68ebb2925ab83a913b56dc1880134095261502b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:ff:9e:af:a1:99:9e:9d:8d:8f:e1:7d:68:
f3:ca:c4:0b:ae:71:84:b6:c6:46:10:e9:e4:ad:e5:
3c:72:2d:d9:42:a3:ca:1e:90:15:3c:57:40:d0:9c:
b8:46:b1:92:6f:14:0f:3f:78:23:06:ee:86:2c:12:
b8:04:03:cc:67:3a:d8:ca:31:3a:18:e9:2e:75:d6:
c9:1d:0f:7c:61:69:53:3e:4a:ab:96:8b:98:2a:01:
a1:b8:a4:f4:bc:08:18:5c:5f:27:29:2a:73:13:88:
6d:8b:a0:0b:4d:79:3a:68:58:fa:d1:9c:af:c0:82:
2a:d0:2b:55:9a:fd:99:02:e2:76:28:ef:50:64:c2:
2a:57:a7:e8:ca:a3:bc:58:ea:4a:ea:53:c5:61:7c:
ad:fe:05:a7:22:ba:ff:cc:c7:7c:7f:b1:19:54:02:
83:ff:4a:6c:06:a9:af:37:7b:21:77:34:49:16:26:
69:96:32:34:28:a9:1c:67:26:28:14:35:8b:24:83:
04:ad:48:3f:8f:40:bd:9f:f9:20:eb:35:04:9e:72:
f7:03:b6:b6:9e:83:b3:8d:4a:46:b9:bd:db:fb:70:
82:1a:9c:91:44:5f:de:9a:46:49:93:9e:eb:b6:86:
5e:2b:14:71:a2:f3:b7:8d:37:40:b9:98:1e:cf:4b:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:B2:92:5A:B8:3A:91:3B:56:DC:18:80:13:40:95:26:15:02:B9
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b4:c0:51:44:a4:d9:b4:cd:a8:a5:1d:62:dd:f6:13:67:7e:
70:1b:31:21:bf:ad:e4:4d:cf:66:12:97:04:08:54:f4:f0:3f:
d8:97:c1:13:f2:40:7d:11:36:ed:55:5c:5b:d1:fb:1d:a1:bf:
82:48:91:36:a2:15:df:40:09:d8:d1:9e:1e:55:1b:2a:ea:0b:
e7:92:4b:fb:cc:f0:7f:a6:72:ec:61:39:5d:29:0c:09:55:56:
d7:50:cd:ed:f0:12:92:4a:ee:7c:82:f2:bc:18:73:33:65:43:
63:35:34:80:84:6a:29:bb:9e:08:f2:ee:c1:43:cb:9a:e5:dc:
e6:46:bd:97:c8:23:5b:43:c7:f4:01:0e:c3:ea:4e:69:9a:a3:
00:f1:4b:e1:90:78:24:aa:25:d8:d6:35:5f:ae:80:7b:f5:59:
82:de:8a:f3:9a:8b:17:1c:2d:30:a1:05:a4:a2:fa:6b:5e:91:
72:58:57:a1:d5:a1:8d:d7:6f:ee:92:36:89:79:50:2e:23:a5:
08:cc:d6:75:db:99:4b:f0:eb:95:b7:3e:ba:36:77:6e:83:25:
6c:27:1d:9b:95:ed:d5:0c:b4:6e:50:d0:d6:76:30:e3:5d:97:
ff:74:e1:9c:a9:06:09:d7:42:4c:9a:69:01:b8:c2:18:ce:70:
1f:f4:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:04 2025 by rpki-client