Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: mWzlXetVhzzGNQGsroeYNpuKs+llLVPwvjlcN6oEHm8=
Subject key identifier: 6E:DA:AE:AC:95:49:CD:81:12:7F:A9:91:4E:06:03:B2:A5:5F:2C:64
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019771F623AD0F52216AE91BA67D393DE994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 05:00:45 +0000
Manifest this update: Sun 15 Jun 2025 05:00:45 +0000
Manifest next update: Mon 16 Jun 2025 05:00:45 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: sKLhvCF36fHnAfdeJaa+GhroWHJ17sNqnwtJVPJvyfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:23:ad:0f:52:21:6a:e9:1b:a6:7d:39:3d:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jun 15 05:00:45 2025 GMT
Not After : Jun 16 05:00:45 2025 GMT
Subject: CN=6edaaeac9549cd81127fa9914e0603b2a55f2c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:23:4d:b1:07:a9:29:f5:15:9b:3c:3c:85:
e4:98:e3:89:19:f7:1c:d9:5b:4e:ea:6a:6f:46:dc:
89:46:3c:81:78:24:96:76:27:ae:bb:2d:39:98:dc:
b6:99:58:35:25:fb:89:d9:63:2a:20:be:97:eb:64:
8f:01:12:48:97:3d:4a:f4:c3:d1:b0:7d:9f:79:b5:
43:99:f3:9a:0a:2d:6c:97:fc:48:1a:df:66:4c:a9:
27:b0:44:b4:4f:72:30:06:0a:b7:d3:fe:72:f6:be:
7f:e1:7b:d9:56:fe:28:38:6a:3d:a3:d3:a1:4a:3a:
a2:6d:4b:2d:c3:4d:ff:35:f9:84:4f:2b:f2:3f:1d:
51:cb:27:50:c8:e0:91:c7:9e:a2:1a:a0:34:72:9d:
f6:59:21:a0:92:96:9b:c4:3a:1e:58:62:0f:aa:8a:
cf:3e:ca:6b:20:77:aa:e8:53:68:39:16:e9:40:ea:
85:91:67:42:20:b7:75:86:9e:2d:d2:87:11:3c:b8:
93:83:cf:86:f0:5c:8d:d0:e8:3b:ba:02:aa:5a:80:
bf:a8:a7:1f:88:d1:94:29:ae:4e:3b:fc:38:4f:36:
fd:ae:f7:3a:ae:a7:1a:91:43:33:ff:68:fc:c6:e7:
15:73:88:0e:b4:5e:d0:58:93:6a:b1:4b:e9:4f:81:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:AE:AC:95:49:CD:81:12:7F:A9:91:4E:06:03:B2:A5:5F:2C:64
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:49:2c:03:f0:20:9a:32:05:8a:c9:93:40:f4:d1:c7:94:72:
03:46:0e:ba:97:61:c6:95:64:f0:e5:8d:54:a5:ed:ba:20:bc:
48:dc:04:8e:8f:11:6d:ca:29:0d:12:d2:ba:f3:d9:f1:3f:a0:
f4:07:6c:9e:42:5d:ae:a7:5b:fa:a7:37:26:33:dc:48:8c:2f:
04:c5:ed:35:15:c9:76:8e:b6:db:f4:44:6a:d2:a2:e0:52:53:
57:15:15:8e:4b:dd:46:8b:91:a7:29:af:db:c2:1c:69:6f:21:
76:80:7f:62:d0:93:a7:85:61:d5:3f:fb:f3:92:ef:54:ea:c0:
11:29:9e:11:8c:dc:91:13:ec:62:78:66:be:f8:a8:01:44:f1:
bd:5f:63:17:c9:15:5c:86:17:30:54:5e:fc:fc:79:37:83:aa:
b6:89:c1:47:64:03:bb:95:3f:f4:01:1e:7e:df:f6:82:b0:da:
bf:7e:a8:76:3b:c1:39:d3:40:f7:d3:94:b0:9a:2d:f8:92:87:
46:69:dd:19:f8:9e:64:f5:1e:cd:a2:b9:33:22:b5:35:80:35:
9c:a2:2e:71:3a:33:8f:02:7e:21:03:0e:8e:e6:45:db:a7:27:
b8:e2:1f:97:e4:ee:da:ef:5b:6f:0b:3f:00:0d:f3:ab:99:b6:
23:6a:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:15 2025 by rpki-client