
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: AMkYucfCzsevYW22AZHDmzZuw+P0JpjFpQAfXY3s/4Y=
Subject key identifier: 10:4B:9A:B8:31:09:A1:C7:E8:C5:3A:44:4A:82:D1:C7:DC:C9:0B:CA
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 0198936D6B93CD1C82767C906DA1CE253F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0177
Signing time: Sun 10 Aug 2025 10:01:18 +0000
Manifest this update: Sun 10 Aug 2025 10:01:18 +0000
Manifest next update: Mon 11 Aug 2025 10:01:18 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: k9I17MJzwJWQEc5klOBgHOU9gYFzG8gtaOdCXOx6cok=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:6b:93:cd:1c:82:76:7c:90:6d:a1:ce:25:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Aug 10 10:01:18 2025 GMT
Not After : Aug 11 10:01:18 2025 GMT
Subject: CN=104b9ab83109a1c7e8c53a444a82d1c7dcc90bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:00:c0:85:83:20:c9:60:0d:6b:2e:a4:06:
3d:d5:ec:0d:74:0c:7c:ab:93:38:c3:75:bf:e8:0c:
fa:1c:c2:44:b8:4f:23:45:62:bc:08:b3:b4:72:4d:
b1:08:7e:f3:c5:1e:1f:42:11:ff:3e:a9:3a:4f:49:
72:80:a4:3e:9f:4e:7e:83:e8:cc:db:4f:e8:0a:d3:
cb:15:7f:d2:89:f0:8d:8e:9e:72:72:5a:9e:52:82:
cf:c7:36:da:4a:7e:fe:54:9d:b5:24:0c:28:ce:63:
ee:60:95:fe:88:f9:f6:34:69:9e:29:17:fe:fb:f6:
07:e2:f8:70:8c:46:04:6b:fc:a5:11:f4:39:a9:9c:
46:73:01:a9:b5:86:03:46:5d:e2:22:b8:c5:87:53:
27:3e:db:ea:d9:d1:d2:7c:0b:48:9b:58:ff:80:47:
79:33:5d:6e:b5:5e:45:a4:2e:64:66:b9:ca:7a:56:
de:51:bb:bf:db:dc:1b:1a:96:26:e2:56:73:91:41:
8c:ee:3a:8c:63:97:94:cd:0f:1a:b1:eb:c5:9a:4e:
bd:b6:0f:43:b9:6a:b0:23:22:99:57:6d:8c:e2:40:
21:5c:e0:54:79:47:91:49:3e:e7:12:56:f9:a5:40:
8f:cd:ce:89:5e:98:e6:cb:09:c1:c2:79:d2:ff:6d:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:9A:B8:31:09:A1:C7:E8:C5:3A:44:4A:82:D1:C7:DC:C9:0B:CA
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:85:fc:46:c1:b4:ea:51:1d:51:e4:13:19:8b:75:22:c6:
35:bb:4c:12:c7:58:ac:4f:e5:e3:b2:41:6b:88:8d:78:1c:5d:
31:a7:15:5a:0e:80:13:81:75:a6:0f:30:4e:6d:6d:9d:06:2d:
f7:cc:bf:79:c2:72:68:28:0b:b8:ce:f0:fc:90:49:db:ce:99:
47:50:8b:0b:34:59:60:66:93:10:a7:a5:e1:5e:b5:7d:3f:33:
9b:69:e2:7c:fb:40:80:a9:a6:98:a2:0a:55:e5:58:2f:46:00:
99:f2:03:2f:e8:cd:b0:3f:8d:d9:06:17:4c:24:bd:95:fd:47:
1f:9b:aa:f4:cf:e6:58:71:1c:a5:c2:72:6e:bf:f5:82:3d:5e:
75:6a:a4:47:a3:26:80:46:49:95:1d:eb:50:ae:3b:a3:bc:30:
56:38:7a:7c:01:96:00:96:fa:04:e5:e9:3b:5d:29:db:28:6d:
73:0f:dc:93:00:dc:5f:2d:b6:93:91:aa:c4:fa:b9:46:8f:a9:
53:5f:e6:eb:66:0d:86:60:b5:69:41:27:a2:4a:35:cf:50:6d:
81:84:6a:a4:ad:71:85:97:df:1d:0d:c7:bb:e5:24:ac:99:f1:
ab:dc:06:03:ab:8f:b7:61:16:88:0b:fe:ea:59:2e:ad:94:05:
a5:ff:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:07 2025 by rpki-client