Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
File: LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json)
Hash identifier: CC79ifG8vvRrkTDRYTpxDKN8rJs4uDHUB7i/SaBEBQE=
Subject key identifier: 23:C4:28:EA:C1:42:FC:FF:77:2C:0E:D8:C4:C3:ED:B5:98:30:F5:E1
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Certificate issuer: /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial: 01988921B6812DE2EF88BBF3301BF84700AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 10:02:24 +0000
Manifest this update: Fri 08 Aug 2025 10:02:24 +0000
Manifest next update: Sat 09 Aug 2025 10:02:24 +0000
Files and hashes: 1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: UgHyoS9wSPTIDWplC2kXNNck1u6M5h6DMMnWR/brkKA=)
2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:b6:81:2d:e2:ef:88:bb:f3:30:1b:f8:47:00:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Validity
Not Before: Aug 8 10:02:24 2025 GMT
Not After : Aug 9 10:02:24 2025 GMT
Subject: CN=23c428eac142fcff772c0ed8c4c3edb59830f5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:07:24:37:e5:ca:0e:ac:1f:46:90:de:88:
d8:65:f0:a2:18:12:ba:06:9a:0a:42:1c:54:49:38:
0e:2d:e7:74:55:e5:75:f3:77:45:24:40:d4:2f:44:
16:aa:61:bc:3b:62:65:06:e1:45:b5:b7:b0:6b:aa:
ae:45:3a:ea:49:0b:29:ad:4e:08:84:70:2a:86:b4:
5a:4c:c6:ea:22:71:b6:28:77:f6:4f:33:d2:47:56:
93:64:c5:b4:c6:39:7c:a6:91:fe:ba:66:3d:d9:42:
cf:aa:b7:91:17:48:a5:86:ab:eb:0f:b5:c7:01:6c:
ed:78:4c:9a:fe:15:0b:60:a0:44:3b:54:de:80:43:
a3:15:6b:30:9b:cf:8b:46:1c:20:20:48:07:8e:56:
82:26:de:32:06:63:d8:f1:5c:77:83:9e:b4:e3:cc:
d3:c2:c2:70:99:65:2b:b6:27:98:56:25:64:9f:10:
e3:f0:87:aa:3b:0e:bd:26:3a:4d:99:93:2a:6f:04:
30:67:8e:24:7d:55:dd:b5:d0:89:39:9a:94:4a:dc:
0f:92:ad:cd:27:32:4a:e7:62:6f:9a:1b:c3:e0:19:
ff:82:25:be:0c:8c:90:32:17:0e:69:9d:54:d0:f3:
1a:52:cc:4f:02:a2:04:81:28:0c:6c:8c:82:ee:39:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:28:EA:C1:42:FC:FF:77:2C:0E:D8:C4:C3:ED:B5:98:30:F5:E1
X509v3 Authority Key Identifier:
keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:21:31:35:f2:cb:c6:56:ac:8f:e4:4f:aa:1e:58:60:cf:ef:
90:9b:b7:8a:b8:0e:c3:06:90:77:c9:ee:29:95:4d:4c:53:e2:
11:87:76:fb:63:cf:82:2a:27:90:a1:db:8c:10:a5:be:cf:bb:
6e:0b:24:76:41:b1:fb:21:c9:d9:9f:e6:bd:c1:44:53:f4:26:
e8:15:3a:5e:46:63:be:f3:17:22:5c:2f:1d:85:1b:7c:df:7e:
ec:62:c5:8f:25:de:b9:aa:e7:a1:fa:34:54:d7:e5:55:1d:2a:
38:58:24:8a:7b:80:e0:61:05:56:b0:99:16:c3:11:67:26:fd:
d1:21:20:2c:fb:e4:5a:2a:be:cd:e2:b6:f6:86:63:f0:66:8f:
40:94:66:5f:cd:dc:13:b2:9e:06:56:bb:b8:78:b3:35:b6:83:
43:51:b8:a7:72:b2:d8:f9:12:e7:d7:b1:a8:92:2d:d7:2f:d7:
67:f7:6b:1d:5b:4e:82:86:1a:46:ce:67:25:89:0b:cb:39:42:
67:4c:92:fd:a5:56:39:ae:ae:a1:ca:1f:12:7e:0a:e1:af:e1:
d8:d6:83:a5:f1:4f:c9:e6:43:13:1d:b7:e6:1c:8f:6f:f9:97:
39:7c:d5:9a:c6:3f:08:33:cf:68:8e:8e:ae:ac:23:bc:2f:fc:
e7:ce:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:03 2025 by rpki-client