Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: 0wuZkz4qI1mcjrIar5f8BO897o2/F5fd5pU4uDfCajc=
Subject key identifier: 99:05:E1:25:25:41:F0:2B:70:06:9E:F6:C0:CF:6C:F2:15:CD:4A:91
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 019873E25EA2E14F856ABA15023C0C88A4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 0FA8
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: 9X58ZzJuAgRug5Pmx1iBZ6bF9J3K+F5DAHxK7HEdqoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5e:a2:e1:4f:85:6a:ba:15:02:3c:0c:88:a4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=9905e1252541f02b70069ef6c0cf6cf215cd4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:cf:b5:bd:18:19:a4:7d:8c:33:a6:ae:1f:
45:d8:94:0c:b8:97:48:2e:95:1b:06:4c:76:a3:f7:
9d:27:b9:fb:67:78:4d:75:66:c5:e5:cb:ea:2d:df:
40:c5:15:4a:75:df:16:af:76:67:76:dc:66:d2:19:
b4:d3:ff:65:c2:1f:2e:c8:26:96:5c:e2:ce:73:30:
f4:61:3c:c9:88:cc:39:ff:2d:5d:f0:df:11:3b:cc:
63:a3:a6:b4:ed:f0:7f:10:e2:68:04:54:fb:da:c9:
a3:59:49:11:c5:3d:bc:aa:32:e9:e2:e8:b5:49:7f:
a8:ad:f2:4d:15:18:5f:6a:46:a6:33:e4:54:62:8f:
2a:c4:1c:be:2b:c4:83:d9:21:43:cd:3c:b9:11:3d:
df:75:0a:b7:0f:2d:46:62:26:8d:c3:82:09:9e:3e:
37:e2:3f:79:aa:c3:a9:79:d9:57:17:78:67:8d:53:
1b:70:9c:25:80:39:3c:9d:fa:92:b3:db:ce:98:2c:
61:4b:ca:a2:d0:df:78:69:56:95:0b:a7:8a:1e:6a:
b4:f2:8e:95:dc:81:5d:39:26:74:7d:a8:d2:3e:4e:
e4:d4:87:8c:28:81:62:84:df:7e:bb:6f:04:3a:68:
92:fd:46:be:0b:88:8e:d8:c2:2b:13:14:1d:d5:08:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:E1:25:25:41:F0:2B:70:06:9E:F6:C0:CF:6C:F2:15:CD:4A:91
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:ce:c9:39:6a:43:b4:94:6e:fa:8e:99:0d:eb:ff:97:6b:
b3:06:5d:45:a8:4c:05:df:4b:89:77:fc:8b:27:2f:87:61:c1:
0f:d9:a0:e7:cc:25:19:a4:25:d2:01:86:86:82:43:27:ad:cf:
65:7f:03:bc:dd:02:bf:91:33:44:2e:a7:0f:c8:ce:30:78:ee:
94:0b:1a:72:a6:d2:86:b1:2d:a3:35:13:83:3b:61:26:06:ad:
eb:7b:d5:68:cd:51:a7:71:7a:27:51:79:0c:26:df:e0:ed:ab:
cd:f3:74:80:65:0d:4f:5a:35:47:e3:0c:4b:d4:20:68:b8:65:
d8:8d:af:d8:61:86:09:ed:7b:ef:5d:ab:37:4e:f0:5c:fb:bf:
fa:52:2b:ab:4e:48:9c:27:37:03:96:f0:14:de:8b:7a:5e:b6:
49:d0:b1:fb:26:67:e5:f9:0a:73:ad:c4:b3:1a:a5:33:84:a2:
fb:80:91:8a:3d:1a:55:b7:8f:b4:01:0c:c6:ab:2b:3d:44:de:
36:19:52:cd:54:1f:72:c9:ef:fa:b0:87:f8:89:6a:61:3c:c1:
a2:19:24:97:d7:08:39:a4:10:1e:d2:64:da:15:43:2f:7a:98:
db:24:b6:c1:06:04:6d:8f:23:db:29:90:1b:fe:b6:39:e6:55:
8e:f6:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:01 2025 by rpki-client