Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: CwFwnArH0A43vTLtlu0Xh7vkLEbsvUuj2bNPaHMTTLQ=
Subject key identifier: 82:E1:40:B5:58:01:04:93:0F:06:64:08:FA:B6:31:31:CF:F8:59:F9
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 01988A332CF3D79525752E32A072252ED58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 15:01:06 +0000
Manifest this update: Fri 08 Aug 2025 15:01:06 +0000
Manifest next update: Sat 09 Aug 2025 15:01:06 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: Gh8e6y1KnDohHRUdv+W6STO6NU4Po20Vu+Wd4XrRFwk=)
2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:2c:f3:d7:95:25:75:2e:32:a0:72:25:2e:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Aug 8 15:01:06 2025 GMT
Not After : Aug 9 15:01:06 2025 GMT
Subject: CN=82e140b5580104930f066408fab63131cff859f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:e6:61:72:e7:ec:fd:46:a9:fc:90:23:0e:
f8:7e:09:f3:8e:f1:d9:b4:d5:d2:b9:c7:ed:05:2b:
60:ca:fb:73:9b:ce:61:61:77:3e:d7:47:91:3b:29:
2d:59:e4:fd:50:ce:d9:98:89:f4:79:af:4c:59:36:
ed:a3:c6:38:80:b1:27:9c:c9:24:c9:5a:bf:7f:54:
bf:0d:39:c5:5a:88:15:d9:89:37:b9:41:d2:ab:8b:
c8:c9:f5:c3:10:e5:e4:0e:97:19:b0:3a:77:75:37:
77:d8:ec:c7:f0:53:92:2b:93:be:51:7f:6a:71:98:
24:59:e0:55:87:2c:19:fb:de:f1:94:19:a3:6d:8d:
c0:e2:7f:05:e0:57:d0:e7:1a:49:1f:6b:42:e4:0a:
6d:f2:57:f4:41:6a:19:77:dd:9e:31:72:a8:2c:5d:
cd:7b:0c:f6:94:47:57:a2:54:25:45:1e:cb:7b:01:
3c:f3:5e:1c:2a:bb:a7:3c:6d:49:80:c1:ce:65:c1:
e4:12:97:d0:22:fd:44:63:8a:1e:a2:09:1c:98:0f:
92:de:0f:91:68:7d:03:f6:f6:8a:ae:60:3f:99:3f:
b5:29:04:f2:34:c1:30:49:1e:20:3d:0d:7c:44:b8:
19:4b:49:91:43:43:1c:00:36:98:8d:85:36:4e:e2:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:40:B5:58:01:04:93:0F:06:64:08:FA:B6:31:31:CF:F8:59:F9
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:6c:39:2f:8a:5d:92:d3:de:05:bf:ee:47:2d:cc:24:3f:
a4:84:4b:46:e6:52:a9:d0:2b:de:70:cc:32:c5:93:be:b4:59:
f1:28:ba:56:f7:de:1e:ba:8b:fd:25:6f:11:3d:a4:88:6b:8e:
56:45:ca:f5:19:d5:dc:37:97:fd:45:a6:79:64:66:35:15:64:
6d:6d:aa:3c:52:37:55:dd:06:56:28:6f:9b:fd:24:b8:35:3a:
20:24:d5:9f:99:c0:67:ee:15:14:06:67:00:c7:58:ff:fd:2c:
4f:db:64:c1:f7:46:b3:5c:81:fb:f9:15:8e:38:0f:82:65:03:
93:28:4e:cf:23:42:40:bb:fa:ce:d3:01:74:34:04:ed:ec:2b:
c9:9e:41:81:e4:45:24:dd:b1:0e:21:f8:77:60:20:b2:b5:ad:
bf:3c:42:6b:c2:29:70:9c:0a:77:83:a1:15:3d:7e:44:af:d5:
52:31:7a:9c:93:17:c0:79:f9:5a:7d:8a:71:2c:73:e1:1a:0d:
fa:a7:7b:5e:6d:9c:e4:23:e1:c2:92:00:64:90:25:48:ea:a9:
dc:32:eb:0b:fa:06:8d:4d:24:30:b3:73:bf:e1:97:d5:c4:81:
24:5c:be:0f:4f:fa:b6:23:7f:9e:c7:6d:de:64:11:5f:72:af:
ef:07:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:04 2025 by rpki-client