Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: kT7h9M7yiyLb7A11Aow5zY8iRHiJQrEAwC8Qv6V818M=
Subject key identifier: 1E:EC:F5:48:B0:D2:F2:56:8F:F0:1F:37:35:22:96:84:A6:0F:BA:97
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 01987DF859E5296CA3DE1D39928F636D673E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0325
Signing time: Wed 06 Aug 2025 06:01:24 +0000
Manifest this update: Wed 06 Aug 2025 06:01:24 +0000
Manifest next update: Thu 07 Aug 2025 06:01:24 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: BDxZedMAWgR1FyJuQmf0N2I9hE8W8fBs26GCbcoFR+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:59:e5:29:6c:a3:de:1d:39:92:8f:63:6d:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Aug 6 06:01:24 2025 GMT
Not After : Aug 7 06:01:24 2025 GMT
Subject: CN=1eecf548b0d2f2568ff01f3735229684a60fba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:de:24:a4:ae:ee:10:15:70:3e:49:8a:60:
83:61:a8:49:36:9c:f3:d8:86:57:c2:98:e0:28:ac:
d2:26:0e:d0:0e:cc:f5:8b:d8:11:1f:ea:35:44:f4:
50:4f:5a:99:0e:b5:6e:71:b7:ce:0b:0d:08:e9:a5:
c8:b5:32:4e:1c:01:20:15:66:1f:9a:ea:cc:6f:d7:
ba:5e:3a:7f:4d:a9:18:f6:89:b5:29:29:b4:76:bf:
07:a4:8d:fb:4f:3b:08:ee:6c:3d:3f:ca:ed:88:c6:
d8:fb:d7:65:21:d7:84:4e:13:d9:cf:c4:59:aa:db:
d8:42:45:a6:7a:1e:7f:1d:b9:9a:61:37:77:7e:65:
51:41:55:d3:91:da:43:4a:2e:16:c4:7b:27:4a:4e:
8f:a3:29:cf:db:18:38:01:fc:d1:5d:70:1a:4a:83:
f1:41:aa:bb:c2:20:a7:e1:bb:48:6e:b2:f6:4e:a1:
e1:0a:23:38:60:0c:74:f2:15:a6:0b:f9:ec:e2:9b:
83:9a:79:c6:0c:96:41:45:cb:91:82:4f:97:0a:0f:
8d:eb:6b:73:e4:92:67:b3:6c:61:54:67:49:1f:e1:
ac:15:55:a6:a8:b7:bd:6d:16:17:a1:ec:a0:83:a0:
d7:2f:df:91:fd:7b:36:3b:c1:84:ae:68:4b:cc:ca:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:F5:48:B0:D2:F2:56:8F:F0:1F:37:35:22:96:84:A6:0F:BA:97
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:d1:0c:7e:ac:99:c2:1f:77:12:73:0d:59:40:57:88:ab:
7c:1b:06:eb:f2:dd:80:7f:05:90:dc:c1:34:85:6b:3f:a3:5d:
da:2d:fe:6a:b4:d4:6c:cd:0d:f0:f0:57:6a:b9:d5:3d:c1:4b:
38:3a:c3:8f:c5:f9:e6:3b:e7:cc:21:82:41:8b:74:05:63:73:
2a:ed:35:cf:fc:e4:5d:1e:f2:6e:d4:e0:31:89:2e:a0:71:1a:
a9:7e:6a:6e:28:54:dd:96:da:f8:15:a7:1b:2c:9d:4c:fe:c9:
0a:fe:a7:69:f8:3e:9c:d3:8d:24:24:d9:98:f6:aa:7a:57:fc:
04:66:0e:51:13:da:61:2a:db:dc:1e:16:ce:b5:9f:c9:6f:10:
1e:ad:ee:ad:8c:5a:d9:83:b1:7c:1f:96:2f:2a:9c:ca:78:3d:
ae:4f:a8:2c:57:92:b7:74:f3:d2:73:f9:22:0c:79:97:7b:07:
89:a0:bf:a2:d9:4b:49:8b:27:ad:5b:57:b2:a2:8d:6b:ee:ef:
cc:c5:b0:b2:c4:e1:a2:3d:ef:ab:55:6a:7d:06:fe:6b:c9:d8:
51:fb:bc:47:d4:d1:96:1d:a0:a8:8a:00:5b:16:2c:a6:dc:fe:
0a:92:6c:63:16:a6:8e:11:00:bb:37:6b:f0:88:fd:32:88:b3:
19:a9:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:18 2025 by rpki-client