Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: tmOP1EaOpfMlZ0zexqKKj49Y61JPhUIhsAhS+zuYBAY=
Subject key identifier: CC:9E:3B:4D:55:32:C2:7A:9A:95:56:EA:06:A5:CC:AF:53:3B:03:45
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 01987B2D6935FED5E200E97343C3DCF2EE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 17:00:30 +0000
Manifest this update: Tue 05 Aug 2025 17:00:30 +0000
Manifest next update: Wed 06 Aug 2025 17:00:30 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: X6eW25iUrCBd14eHJXKMtHusWrm2JXE5DvTzgLYvcg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:69:35:fe:d5:e2:00:e9:73:43:c3:dc:f2:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Aug 5 17:00:30 2025 GMT
Not After : Aug 6 17:00:30 2025 GMT
Subject: CN=cc9e3b4d5532c27a9a9556ea06a5ccaf533b0345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:68:18:d0:f5:db:7f:32:cf:2a:dd:51:80:ac:
47:6e:34:07:af:ff:5b:e3:9c:ba:0b:70:08:1c:10:
55:4c:38:0d:29:e1:7c:68:ba:b8:1a:3d:6d:58:14:
28:8a:a9:55:0b:a8:3a:16:5b:de:0b:19:10:19:df:
d6:60:7b:6c:69:bc:a0:15:eb:cb:8b:4c:66:05:50:
e0:34:40:30:fc:5f:1a:e1:82:f5:db:39:fe:1a:d6:
06:be:8d:6c:51:e7:10:d7:57:40:15:9f:74:f0:e1:
5c:28:ff:96:69:69:93:ea:7d:03:bd:f2:63:86:b4:
75:fd:fe:0c:91:f6:3a:b1:93:07:22:2b:ef:16:ad:
c0:30:48:e0:b9:3b:7c:7f:cb:3e:60:f8:4a:6a:5a:
51:8d:5b:bb:fe:51:7e:48:38:97:4b:dc:73:4b:e2:
1d:56:94:4c:08:46:2d:cf:50:66:aa:e6:0a:ce:32:
48:f8:76:d3:4e:e0:b8:a8:78:04:9e:66:89:2e:1d:
5c:e2:0f:e2:e2:39:f1:4f:32:da:92:23:d0:85:28:
83:f3:12:97:ef:30:97:45:1a:8c:4a:00:bf:4a:62:
ec:f6:02:77:95:a5:a8:b2:bd:31:cb:e2:86:97:5c:
9e:e4:93:37:cc:1d:45:f9:bc:5f:b0:4c:8a:6d:ea:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:3B:4D:55:32:C2:7A:9A:95:56:EA:06:A5:CC:AF:53:3B:03:45
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4b:ce:a3:86:f7:70:b8:6c:be:c1:8c:3d:ae:fe:16:b7:d7:
a6:f7:15:0f:f2:f0:34:c3:7c:08:d0:41:fa:44:1c:e9:c3:be:
36:61:e0:81:30:e6:17:9d:e2:7c:49:fc:a8:9c:c4:ca:d8:ca:
0e:70:d0:51:29:be:0f:6a:18:f1:b1:5a:9f:11:d1:b7:cb:f5:
c7:ad:60:45:92:ff:13:6b:0a:b6:2f:20:87:1b:c0:63:3d:19:
12:37:fd:92:1d:d8:ca:cc:13:19:30:4d:0a:02:5b:8b:9a:c3:
a9:eb:ef:47:fa:d6:ed:2d:f7:7d:b9:c3:4d:ec:16:f4:34:01:
ce:ba:b6:7f:b3:f3:be:02:7f:36:3f:72:b8:ff:25:26:6f:97:
96:9b:7d:d0:87:c8:3f:37:47:38:83:d6:bb:fc:f3:f9:2e:88:
2b:73:c6:93:28:bc:3a:af:3c:1b:4f:b4:68:97:9d:18:75:7f:
26:8e:16:e2:aa:fb:52:1b:bf:5e:43:55:58:bd:50:6a:c3:d7:
73:77:1b:4d:b9:d4:e1:16:5f:04:15:ae:d3:1e:fd:b4:0a:05:
6c:37:f1:a9:64:c8:85:7f:96:88:98:08:e6:f7:40:5f:21:fa:
d9:ac:7a:c5:a5:6a:1f:e5:a9:71:f3:53:86:00:41:c2:c1:01:
99:4b:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:48 2025 by rpki-client