Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: 7KIzB0IOLpgSlHNZCqqdGM+PKi+KqqcISLb0lqISy2o=
Subject key identifier: 29:B1:BB:50:B7:9B:9B:FE:01:C9:B9:6F:9C:BA:0D:E6:22:08:AB:BA
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 01987C0A488974394F74AA5AE60FB6487990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 06D8
Signing time: Tue 05 Aug 2025 21:01:45 +0000
Manifest this update: Tue 05 Aug 2025 21:01:45 +0000
Manifest next update: Wed 06 Aug 2025 21:01:45 +0000
Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: XrzWwQLK+9yV8sDhLQNVYxCmuEpj1O7Yp7sAApgv2cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:48:89:74:39:4f:74:aa:5a:e6:0f:b6:48:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Aug 5 21:01:45 2025 GMT
Not After : Aug 6 21:01:45 2025 GMT
Subject: CN=29b1bb50b79b9bfe01c9b96f9cba0de62208abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:e4:69:b3:12:74:38:49:4d:55:f6:71:e9:
bb:9b:81:8e:b2:71:c0:59:e1:9a:3e:ef:e9:bb:f1:
5d:06:a8:64:5d:09:e2:ae:f5:1d:1e:07:83:1d:88:
e5:07:37:b4:6e:35:5f:0d:5a:8f:d9:10:b6:40:cd:
d6:65:db:c0:0d:b7:ab:3d:d2:4c:ba:74:d6:81:c2:
b4:9f:b4:61:00:72:8f:cf:4f:0f:87:7f:38:47:02:
94:11:b5:d3:c8:33:cd:d4:31:25:53:99:a5:a7:14:
5c:92:08:64:f9:a3:c7:69:35:cb:70:fa:75:b3:2d:
f7:97:16:d0:a6:0f:4e:e1:fe:6c:34:35:6c:f3:c5:
1f:5a:a5:e9:0d:16:5d:df:87:92:2b:75:26:e3:03:
d6:26:c9:9a:cd:be:fa:f4:32:34:ad:d1:c9:a5:4b:
a4:af:11:8c:ba:e5:2a:7f:8d:b2:80:a2:5d:f2:68:
51:f2:2d:41:d8:0b:a3:34:a8:48:6f:ab:c7:df:bd:
b5:5d:f4:5f:6b:23:00:d3:a2:fe:e3:b6:49:92:78:
55:5c:c8:32:0c:88:6b:98:6e:8a:62:01:18:10:8f:
a6:43:c6:d2:4f:ea:a2:7c:5b:93:2c:5f:f9:8c:7c:
34:f0:a0:11:62:a9:8e:8e:a1:86:75:9a:8d:0c:e8:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:BB:50:B7:9B:9B:FE:01:C9:B9:6F:9C:BA:0D:E6:22:08:AB:BA
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e3:ee:d6:30:62:40:ce:83:e0:49:d0:99:4c:d4:a1:96:43:
98:7c:6f:eb:91:08:ff:e9:07:7c:53:ec:ef:aa:a4:70:25:65:
26:24:c0:6c:75:1c:66:4e:1b:77:c7:1b:62:12:4c:ca:ab:09:
c6:f1:75:8f:0d:46:62:c4:2e:20:a2:72:db:a8:ab:ab:cb:89:
cf:5e:a2:d4:88:88:19:be:de:f5:39:1b:84:57:ed:00:89:c2:
b9:d7:e1:a6:6c:7a:18:3e:dd:f5:bc:00:48:9a:a1:f9:74:4b:
b0:c8:97:a1:13:f5:70:6f:ff:8e:c9:78:1d:d2:c9:e1:27:9a:
cc:23:04:7f:f5:f6:85:fe:be:4c:d0:66:a5:84:a1:54:ce:fe:
c1:62:f1:3b:2e:f9:e4:05:59:01:09:cb:c0:0d:a1:a1:94:81:
59:eb:a2:68:2f:6a:7a:72:09:74:ec:54:ac:a5:97:7d:8e:56:
1f:e4:65:ec:71:af:78:ce:c9:bb:b7:7b:0b:d0:b5:3b:fa:8e:
51:87:98:ae:66:3a:55:02:0f:78:8d:bc:c7:82:f5:b8:8e:53:
d1:f4:7f:62:dd:24:80:ab:17:43:48:97:67:80:6f:97:38:13:
22:16:98:a8:31:5e:6d:65:35:c9:cc:59:16:cf:c5:e1:40:19:
ff:1f:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:46 2025 by rpki-client