Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: MajlfmRgSgZhGOlpT6W+Ah1Bn/pgSlDwrLbypqgRTsg=
Subject key identifier: 68:54:E8:BC:BF:78:BF:CA:2C:CA:5E:4D:79:8A:E2:A4:8F:C6:3C:96
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019788EBD8D0294FC715773951CB643A35FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0B65
Signing time: Thu 19 Jun 2025 16:00:46 +0000
Manifest this update: Thu 19 Jun 2025 16:00:46 +0000
Manifest next update: Fri 20 Jun 2025 16:00:46 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: VDDTm0/m7pl9f1dScfjRLgJug4dWw74uFfdJf0LDpWg=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:d8:d0:29:4f:c7:15:77:39:51:cb:64:3a:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jun 19 16:00:46 2025 GMT
Not After : Jun 20 16:00:46 2025 GMT
Subject: CN=6854e8bcbf78bfca2cca5e4d798ae2a48fc63c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:31:bd:30:7a:ae:92:6c:c7:17:0e:86:07:
89:2c:69:24:4a:4d:bf:9e:7d:af:2e:d8:e5:b7:80:
43:a1:8e:99:f9:78:6c:65:91:1b:ca:0d:38:ef:5b:
c0:39:67:e9:93:fb:65:0b:7c:14:06:5b:d8:3f:3c:
83:d6:51:00:9c:b5:0c:38:55:b0:df:a3:1d:77:92:
5a:ad:16:1b:6e:68:9d:fc:b6:b8:4e:7c:69:ae:67:
a8:c6:56:6a:43:ec:40:88:42:50:e1:05:5a:cb:17:
9d:bf:e5:05:a2:0d:6a:c2:9b:38:f8:c1:1d:6b:a3:
de:30:e2:fa:58:71:48:5e:8a:c1:59:40:a3:9f:9e:
b2:42:42:9f:18:3b:36:da:fc:6b:9f:13:30:e7:e9:
7c:41:b8:57:20:ab:b1:0e:2e:93:75:9d:9d:a5:ef:
d7:73:c0:8b:e4:62:2a:e4:56:fd:56:3b:ef:75:31:
cb:34:94:de:65:87:ce:65:0e:14:04:12:ba:8b:21:
16:f7:10:72:92:2d:ac:6f:72:81:01:bb:57:f6:69:
f1:8a:06:1a:6d:42:c0:07:6b:ac:76:db:34:a3:d5:
21:6c:4d:e1:95:0b:a1:d3:b7:ee:f4:07:6e:25:f7:
67:ef:39:64:c7:22:ef:7f:a8:f6:98:cc:86:49:c4:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:E8:BC:BF:78:BF:CA:2C:CA:5E:4D:79:8A:E2:A4:8F:C6:3C:96
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:1d:d0:f4:0f:22:9c:b1:73:2c:69:c9:cf:0e:c7:b8:a6:
27:ae:68:d6:1b:ff:02:9b:00:c3:39:d5:64:34:30:76:4b:48:
69:1c:40:10:80:31:8a:81:73:90:00:32:0c:12:83:6a:a2:c5:
55:6a:6e:35:6e:02:14:44:21:63:c5:79:b9:9d:e5:b7:9f:49:
02:e6:9a:d9:82:7d:a1:74:7e:42:f2:3f:af:66:ba:63:a4:47:
48:99:f1:59:9e:59:89:f0:04:54:73:3d:c3:3e:3b:49:cd:8a:
98:67:e8:e9:e4:d8:13:be:7d:1f:4e:92:c7:f0:84:fd:8b:ac:
67:f3:ef:dc:56:1e:6b:5f:9e:95:d5:b3:4c:1e:e8:62:bd:40:
cd:49:40:08:88:14:8b:60:53:8d:15:8d:a5:d6:91:77:6c:e0:
89:00:c1:c3:65:e8:e1:a9:9b:5d:ee:cc:e9:7e:72:35:9f:c0:
ee:2e:a3:93:55:cb:13:0a:47:4f:d8:cc:77:fa:39:ff:47:e6:
41:cb:99:17:13:ed:13:c4:2a:29:6e:45:ba:95:71:e0:11:be:
c2:1b:87:9d:d0:05:ff:2d:10:4b:ca:7a:35:97:ef:fb:c4:f3:
c9:ba:58:9d:46:cd:52:de:37:94:0a:71:32:23:da:fb:7f:a3:
d6:58:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:21:41 2025 by rpki-client