Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: WUFTpIAOGrnSzD3nwk1Bw+xdMGstBH9BWA/WVbfTBOY=
Subject key identifier: 8E:83:F3:C5:14:F5:0D:6D:6A:98:E5:CC:AE:60:71:71:5D:F5:24:28
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0198741922F400569B61DA4020780C49934B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 08:01:00 +0000
Manifest this update: Mon 04 Aug 2025 08:01:00 +0000
Manifest next update: Tue 05 Aug 2025 08:01:00 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: bnN9vkcbazB7BmWR9n97lr+SZmlhvVMr9c3kDTX6cwU=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:22:f4:00:56:9b:61:da:40:20:78:0c:49:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Aug 4 08:01:00 2025 GMT
Not After : Aug 5 08:01:00 2025 GMT
Subject: CN=8e83f3c514f50d6d6a98e5ccae6071715df52428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:5b:97:33:d1:b2:c4:36:c0:c7:7a:83:be:
ff:dc:49:c5:95:df:53:84:71:ab:9d:9e:89:b6:c0:
d1:56:2d:8a:df:e2:6a:ae:c1:c0:cf:ec:e9:45:1a:
4e:44:3d:f7:5c:68:fe:89:03:26:23:9c:9d:47:cd:
96:6c:13:e1:dc:e9:b5:40:8e:53:fc:fd:7c:4e:74:
4a:4d:00:84:f1:93:0f:b3:23:82:3e:a6:1c:3e:58:
6b:bf:94:b7:e8:26:85:a2:68:9d:fe:3e:20:56:57:
e4:83:52:8f:3d:e8:0c:9a:5d:2b:43:a0:c2:35:50:
75:32:29:71:64:42:9c:96:a7:22:a0:44:90:dc:8d:
c2:19:9a:7d:d5:de:e1:bd:a6:ac:e3:84:eb:40:4e:
01:79:0b:20:66:4d:7a:81:ca:2d:56:2b:87:5f:9d:
da:a5:4e:8e:b4:52:6d:66:a6:c6:f8:5e:57:1d:d0:
a0:e6:1b:21:f3:c3:11:d2:55:7c:16:a7:dd:5f:10:
a3:ef:ff:9a:83:99:05:ed:84:72:f1:2e:47:9b:ad:
23:12:4d:e6:f6:fb:fd:29:b0:0a:cf:01:71:d8:10:
48:ff:25:3d:25:2f:d3:5a:a0:0a:67:d3:02:68:7c:
43:c7:56:ca:63:c2:07:e0:14:ef:49:73:5c:f3:47:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:83:F3:C5:14:F5:0D:6D:6A:98:E5:CC:AE:60:71:71:5D:F5:24:28
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:36:a9:70:b8:c7:7d:31:ad:c5:1b:93:83:af:77:0c:cb:38:
22:f7:7f:43:1a:2d:e6:d0:7b:32:14:61:22:da:35:e3:01:27:
8c:b0:dd:e4:b2:f7:f5:87:62:9f:97:56:15:83:40:d8:7f:ef:
87:37:8b:66:62:08:76:2a:81:e6:77:55:f1:2e:04:b1:8c:06:
31:24:dc:2a:35:65:ce:45:31:ed:7e:55:58:f1:26:ff:23:3a:
61:bb:11:ca:f8:40:c6:70:79:dd:80:d7:32:0c:a3:0b:57:5f:
c2:92:fe:af:70:49:51:26:38:76:48:8f:04:30:fe:64:c4:65:
6e:d3:9b:0e:e6:31:79:3c:9d:13:10:4b:83:5e:fc:b8:09:12:
27:e1:0f:f8:cf:3b:7c:fd:f2:4b:24:00:6c:b4:e5:6f:f0:f1:
c4:db:7d:b5:09:f3:03:eb:65:94:08:24:f5:d5:96:b2:97:19:
9c:f6:f5:80:6e:1d:f9:fe:66:4c:c0:40:fe:b3:09:d5:d3:6c:
58:01:a8:9d:4f:dc:59:f6:28:a9:47:bc:16:33:36:15:88:fe:
20:9b:8b:ca:c8:c1:14:4f:b2:a5:f3:ca:fa:e5:ad:13:1b:99:
1f:67:ae:ef:53:c0:98:be:f2:95:08:43:cb:f5:3c:55:95:a8:
ac:cb:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:30 2025 by rpki-client