Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: HuhZ6z/8rSeYlHXwL30GFtTcu4SxOZHHblHFt89D4FY=
Subject key identifier: 7D:C8:80:CD:D0:52:D1:01:33:C8:AA:AD:5A:A9:0E:D5:13:E8:CD:88
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0197752DDAF8B9984F280636A6520B109924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 20:00:28 +0000
Manifest this update: Sun 15 Jun 2025 20:00:28 +0000
Manifest next update: Mon 16 Jun 2025 20:00:28 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: Z0WxiMAwchlueNuM4h8gxiudM+f3ZjmpSmpzE4V+CzE=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:da:f8:b9:98:4f:28:06:36:a6:52:0b:10:99:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Jun 15 20:00:28 2025 GMT
Not After : Jun 16 20:00:28 2025 GMT
Subject: CN=7dc880cdd052d10133c8aaad5aa90ed513e8cd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:a9:fb:23:38:c0:fb:df:10:4e:e5:dc:8a:
f8:45:55:b8:51:fa:9a:0e:06:4e:59:2e:68:4e:04:
fe:2e:d2:12:88:a5:5f:df:75:f1:99:b7:d5:9e:83:
2c:94:d2:ef:10:b1:25:50:e9:25:7c:8e:70:7b:22:
5d:00:27:86:52:5c:4f:f9:95:cd:57:89:e6:60:4c:
b8:4e:47:75:27:81:00:93:35:29:e2:7e:9e:f3:48:
fe:52:f1:17:4c:98:eb:e8:99:d0:04:11:b5:d1:ad:
37:aa:9a:70:2e:06:d2:10:55:a1:79:2f:37:53:f9:
c6:bd:93:eb:f8:ca:c9:10:9d:ff:f7:11:10:d2:75:
ef:41:94:14:dc:92:66:ca:38:e5:11:d8:05:80:a1:
78:6b:7d:f9:5e:f3:da:b9:a6:f8:c0:e7:4b:d9:c6:
24:f6:b0:3e:cd:af:06:56:55:54:3c:1e:70:99:29:
77:4b:a9:69:e1:65:93:b3:d7:bf:31:b7:89:0d:da:
42:44:4f:4b:97:4c:ca:ec:cf:ac:7a:36:fb:b3:c1:
dd:a5:d1:f0:2f:fe:10:24:14:99:ee:34:49:e0:9d:
e5:42:d9:40:c5:d8:bd:7c:ee:cb:c9:12:d3:36:09:
db:e1:39:bd:b9:35:dd:3a:d9:d0:80:14:f8:1f:c3:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:80:CD:D0:52:D1:01:33:C8:AA:AD:5A:A9:0E:D5:13:E8:CD:88
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:b3:cb:e8:7b:99:76:7d:14:23:a0:63:a4:3e:57:cd:fa:
17:60:95:07:a6:33:4f:7f:ca:f9:54:f6:b6:8e:3a:35:75:11:
1a:bd:48:e3:e4:9b:13:eb:d9:ba:d5:04:1c:48:0b:27:1a:f5:
5d:a6:42:3b:f3:40:e6:c4:2f:a0:a1:d7:0c:14:0f:8b:c7:2e:
53:a8:73:d5:81:f4:e7:0a:6c:4d:a6:76:7b:2b:d5:ef:9f:c2:
77:2f:ef:6a:65:f4:67:e3:d0:ce:2e:d3:ca:62:d1:51:26:bc:
19:85:39:f5:07:19:64:4c:aa:f2:f6:3a:7c:18:d0:a5:a1:9a:
7f:2e:de:35:63:83:0b:8a:90:61:68:7a:bd:7d:70:69:ba:f2:
95:66:c0:48:0e:10:49:90:ad:1c:17:14:b4:ed:f2:65:cc:2e:
11:a6:4e:08:9d:f4:55:05:ff:91:36:48:70:b7:78:92:42:5c:
69:1d:10:ab:4f:4b:40:8c:41:a3:ac:82:e2:27:db:81:80:e0:
74:27:d5:27:e8:e2:1e:19:fd:25:d4:2a:d2:37:86:02:60:cf:
46:f7:c6:5d:84:59:e2:26:98:16:2e:d0:24:e6:3b:17:52:99:
e1:42:91:ee:98:fb:1b:46:12:de:48:51:9b:f9:03:1b:e2:44:
93:8e:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:05:11 2025 by rpki-client