Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: P5GfMR2+RmGNkpSeml+mh0zr0HCk9jo0To7LUiLzm7I=
Subject key identifier: 9C:A7:75:E4:89:03:2D:DA:07:35:FD:CC:E0:E7:0E:6A:25:CD:8F:55
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019776E587ABCE35652B05358BB068EEE2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 04:00:43 +0000
Manifest this update: Mon 16 Jun 2025 04:00:43 +0000
Manifest next update: Tue 17 Jun 2025 04:00:43 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: WS8vg87YBtJUjPkBmMi7ehpuZ82wcRyI2PCcY/VFNxE=)
2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:87:ab:ce:35:65:2b:05:35:8b:b0:68:ee:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Jun 16 04:00:43 2025 GMT
Not After : Jun 17 04:00:43 2025 GMT
Subject: CN=9ca775e489032dda0735fdcce0e70e6a25cd8f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:7f:04:89:44:e6:8d:68:1c:c5:2e:b9:ce:
58:72:09:1e:10:28:ca:d9:90:a3:29:0f:74:f8:78:
be:07:75:33:73:1c:79:28:ef:ad:ae:bc:c6:8a:5c:
06:19:a0:7b:23:03:e6:d9:f0:59:53:12:7e:04:6e:
d0:9e:ff:19:47:47:72:45:e3:ca:c9:2e:30:fb:71:
36:de:8d:4d:00:9d:c9:f6:08:25:38:5f:b2:86:a0:
cc:71:1c:72:42:37:d9:19:24:02:9d:3b:90:a9:30:
f0:d9:97:51:01:5c:f7:20:da:39:d4:ec:d6:10:14:
0c:7f:d0:23:56:44:5d:47:d5:d5:17:ae:08:34:fc:
41:8a:bd:55:e9:8d:9c:e3:07:55:5e:e4:84:1c:20:
25:e3:0a:1d:6b:ac:f0:45:ff:c1:00:dc:10:e1:e5:
e3:51:7f:14:2d:5f:ca:f4:84:63:f9:7d:50:cb:e3:
c0:1d:d3:65:79:2f:0b:e9:60:e1:3a:50:76:b6:13:
d1:55:8d:18:a9:37:ab:ff:a9:36:a0:12:62:ce:b5:
a5:31:94:e8:47:88:85:ad:4a:51:a3:26:d4:53:41:
a1:0e:fe:ec:e8:14:d7:e4:1b:31:d3:37:70:36:e8:
be:f7:62:60:ec:f1:4d:54:c2:7f:25:d6:fd:bd:45:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:75:E4:89:03:2D:DA:07:35:FD:CC:E0:E7:0E:6A:25:CD:8F:55
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:eb:b8:8e:30:28:dc:96:1a:19:f6:ba:5a:26:83:8b:1c:
28:99:27:a0:86:f2:fe:7f:a8:08:19:3d:e3:01:89:f4:18:50:
fa:e1:40:e9:61:51:0a:fa:b3:fa:70:87:74:d2:d0:cd:b0:e5:
03:42:8a:cf:f6:fb:b1:a9:9d:be:3b:c7:1a:36:0f:e2:ba:04:
67:48:bb:7c:40:f8:3f:1c:dd:cd:cf:b0:5c:d1:96:fd:d4:0c:
6d:68:31:2d:63:af:49:df:da:86:63:c0:ea:8a:7b:5b:6c:df:
f5:fe:8c:a1:45:58:9f:f6:b9:41:ea:7e:76:15:cc:ea:fd:1e:
26:25:03:f4:31:c5:48:ea:2a:b3:0f:12:c4:28:b5:7c:f0:e9:
16:d9:b1:ce:a2:62:69:25:81:b3:4f:8a:74:6f:ac:53:31:95:
0e:dc:d5:20:e5:59:f4:33:4a:ce:81:14:d1:98:10:b5:6e:9c:
fb:23:73:e9:62:ba:93:2d:08:5a:6b:37:53:7e:5e:ca:76:49:
29:59:7e:fb:a0:de:2c:7a:bc:0a:19:20:31:dd:f4:a9:b3:91:
c2:42:39:6c:aa:cc:a4:a0:45:53:48:f5:a1:49:46:c1:9a:63:
dd:54:a4:82:5a:23:bc:da:4e:c7:64:a9:7e:e2:1e:5f:0f:81:
1d:e3:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:31:41 2025 by rpki-client