Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: 1Nqz0QrcgJpKfMbo0W9orb/ENU1GDHOKukUm+KesLj0=
Subject key identifier: A7:EB:6D:C5:B2:14:AE:32:32:C6:20:7E:E9:A9:7E:1D:1B:8E:81:A8
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 01976C2ADA0718E890D7C4937652AE96269F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 02:00:37 +0000
Manifest this update: Sat 14 Jun 2025 02:00:37 +0000
Manifest next update: Sun 15 Jun 2025 02:00:37 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: VXS28K+0QY4JjBNdp8cKyMahq4g7pWRISJb7kBs+lSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:da:07:18:e8:90:d7:c4:93:76:52:ae:96:26:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Jun 14 02:00:37 2025 GMT
Not After : Jun 15 02:00:37 2025 GMT
Subject: CN=a7eb6dc5b214ae3232c6207ee9a97e1d1b8e81a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:a2:96:c5:9b:d8:c0:c8:b4:ac:8f:fb:53:
cb:b3:41:1c:12:9c:39:51:ca:ca:51:67:36:9c:0d:
1b:cc:41:25:34:9a:68:9e:b0:f6:b1:84:29:e7:d6:
54:a4:f5:72:e3:d3:d6:cd:c3:93:a0:49:9d:61:7e:
3f:25:d7:cf:4e:84:f6:76:c6:55:81:b0:77:70:ac:
2b:10:1a:6c:30:cf:86:ff:64:99:d6:62:11:12:0b:
f8:0c:c6:0e:07:f9:92:fa:43:00:01:6e:69:d0:90:
96:61:c9:15:63:65:69:fd:2b:84:8d:7f:46:b3:68:
26:d5:ce:0b:ae:84:4a:8b:46:35:17:80:37:d5:64:
23:77:98:c4:83:5a:8d:5b:e4:63:e4:1a:e1:25:18:
bb:75:69:21:92:8b:bf:32:07:d1:a3:1b:d3:2a:d3:
30:c5:f5:f4:ad:33:a2:27:38:15:09:33:e6:85:4b:
a1:72:30:30:f1:5e:6d:59:9f:00:76:0e:4f:a9:88:
4b:5e:bf:28:71:79:ca:8d:74:c9:e8:0e:90:4e:f8:
95:02:d0:78:2b:6e:67:93:b8:12:54:29:94:4e:cb:
76:d3:73:9e:90:c5:cc:36:92:dd:d5:19:01:2f:70:
41:46:44:b7:93:cf:08:eb:d7:e3:ea:e6:c1:30:ed:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:6D:C5:B2:14:AE:32:32:C6:20:7E:E9:A9:7E:1D:1B:8E:81:A8
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9f:cd:14:df:7a:03:30:93:8e:aa:bc:18:61:2a:dc:cd:ec:
d5:5b:34:57:ac:53:87:7b:fc:2f:ed:c7:0f:37:94:b6:1b:62:
57:95:e4:b4:d0:d8:4f:cb:3e:af:a6:02:03:a4:bc:4c:e8:b5:
ba:a0:15:8e:61:94:1d:97:5a:a6:a0:28:a7:ec:a4:75:70:18:
fd:4c:3e:16:bf:d3:9b:3f:79:d9:40:22:c9:86:c3:c0:a4:27:
aa:2f:8a:30:36:d5:51:db:15:9d:9f:09:4b:e7:ce:b4:2c:85:
a3:8f:57:9e:bf:c7:39:01:70:25:b1:24:5c:10:73:e3:fe:d1:
1f:db:b1:72:61:9b:5a:8b:ed:d4:31:82:a5:50:48:de:a8:b0:
c3:6a:48:e8:d9:36:ba:22:15:1d:b0:9e:41:39:b2:d0:d2:ee:
9a:2b:2a:27:87:57:c7:41:79:b0:27:64:93:a1:a7:7d:ed:a2:
a6:c9:6e:9c:9c:79:aa:94:10:86:e7:ff:f1:c0:0b:8e:da:cc:
b9:44:93:ec:78:d1:7e:4d:df:c8:9c:8d:41:ff:fe:5e:ed:c2:
ba:d9:13:12:dc:2c:9d:aa:ba:37:91:ca:ca:82:9c:16:0d:d5:
37:4c:95:ec:3a:d2:e3:42:0b:e1:d1:2a:5b:d5:0f:5d:23:b2:
aa:af:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:35 2025 by rpki-client