Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: OoZbQWPIMWT+KtcS5o13+Y2n1vjz35p61xUvbPY2fkU=
Subject key identifier: 50:CC:2A:EB:64:70:67:7C:EA:B4:95:28:59:56:CB:84:87:6D:D7:97
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01988DA1DE21FAEAE50F95AF00D527BA38A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0BEC
Signing time: Sat 09 Aug 2025 07:00:52 +0000
Manifest this update: Sat 09 Aug 2025 07:00:52 +0000
Manifest next update: Sun 10 Aug 2025 07:00:52 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: bAfIm61J/UmfMLyYOPohK8mWK92QA77K5OFyit8GXMs=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:de:21:fa:ea:e5:0f:95:af:00:d5:27:ba:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Aug 9 07:00:52 2025 GMT
Not After : Aug 10 07:00:52 2025 GMT
Subject: CN=50cc2aeb6470677ceab495285956cb84876dd797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:57:d5:27:61:49:e5:24:66:17:be:93:a3:
b3:1c:d7:aa:64:06:5f:8b:ef:ea:d4:92:c9:97:1b:
2d:cc:aa:25:4c:17:c4:7e:a4:02:e7:9b:b7:3c:5b:
9a:2a:85:8d:77:13:e6:8c:d6:c7:c9:b4:22:67:fa:
5d:d6:3a:2c:aa:0c:12:2f:7f:0d:6f:a2:48:f6:e4:
9e:9d:22:06:dc:d3:4d:e8:de:b5:8d:2b:ae:d2:f1:
6d:ff:fe:0f:87:d9:bc:8a:2f:ce:03:1b:33:88:35:
43:71:cb:5e:c0:82:3c:e5:c8:e8:8e:ea:0b:4a:58:
7f:f5:e8:ea:9a:1c:7d:68:4b:ad:60:18:a1:72:4f:
37:85:b8:9c:6d:83:68:81:94:62:ed:f1:1b:ca:1e:
ed:fd:55:44:9e:f4:c1:fd:36:ae:59:b0:8c:d2:32:
88:93:59:ce:5b:92:a2:5e:89:96:2c:b2:47:c9:dd:
8e:e5:42:52:77:be:2e:cc:a6:21:3b:f6:43:81:d1:
c5:67:75:bb:e9:7d:4c:1e:3b:19:6e:38:bf:d5:2d:
c2:28:81:7c:1c:8a:d2:3f:6e:84:64:3c:7a:e0:86:
57:1e:3b:4b:1e:d7:62:d3:41:f7:d4:c5:34:84:92:
36:6e:c5:01:59:b5:58:81:7a:4d:5b:af:2d:f3:b4:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:2A:EB:64:70:67:7C:EA:B4:95:28:59:56:CB:84:87:6D:D7:97
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:6f:77:58:f9:a4:90:70:89:6b:ec:e8:d2:a7:ae:ba:68:
bf:ab:6f:20:33:82:99:7f:f3:98:1a:9c:ef:de:0d:a6:d2:32:
b5:7b:1e:ff:d1:51:ce:ef:b0:60:83:a6:cd:d7:ed:a0:e9:9d:
92:37:70:c5:46:3f:07:a1:bc:ea:0d:84:a6:98:6b:ef:8d:72:
c6:4b:db:ab:a0:30:53:2e:99:a4:9d:86:5d:01:81:19:b0:40:
1c:79:9a:25:72:e3:62:7b:ca:33:d8:44:f5:e9:04:5d:d8:a4:
16:cd:c1:d0:b0:ae:e0:3a:96:cf:25:a4:32:d5:af:55:7c:34:
ea:7a:ac:ec:d0:24:24:e3:c6:fd:34:b2:66:d3:8d:66:20:c5:
0f:33:b5:e9:f9:d9:92:3e:10:ac:11:e9:8a:1c:fd:94:36:99:
6b:d7:eb:3e:91:89:16:3f:a9:de:1a:b1:d0:a9:9a:ae:a3:f2:
a8:ed:42:f9:bd:9d:46:a2:bd:7c:c5:d9:f4:95:76:ab:26:1b:
99:4b:21:61:7e:24:ee:8c:e0:c2:b8:30:e8:4b:bc:fc:50:4a:
89:7e:ec:6f:8b:a9:14:e1:39:71:4b:6e:8f:cb:35:ae:f7:cd:
28:ab:dd:75:f4:fb:16:3d:c0:15:05:4e:44:5d:40:d5:99:3c:
e1:c0:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:16 2025 by rpki-client