Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: qdQpE90z35QFdoRrDzcccqvMdM0PpH0fj8AuLQAwExs=
Subject key identifier: 29:7B:3F:E0:19:E8:DE:A7:4D:1B:5C:F4:DC:54:7B:9D:6C:73:43:F4
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 01989749B60409F4BE97E89F401C77367ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0B4A
Signing time: Mon 11 Aug 2025 04:00:46 +0000
Manifest this update: Mon 11 Aug 2025 04:00:46 +0000
Manifest next update: Tue 12 Aug 2025 04:00:46 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: 3092gUFPdxXkLwx0U3eXtcFh18gldLQ5eyb6j1xP4to=)
2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b6:04:09:f4:be:97:e8:9f:40:1c:77:36:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Aug 11 04:00:46 2025 GMT
Not After : Aug 12 04:00:46 2025 GMT
Subject: CN=297b3fe019e8dea74d1b5cf4dc547b9d6c7343f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:dc:4c:9a:99:51:49:8e:c4:3a:b5:fb:23:
40:f4:22:db:5c:3a:54:70:04:16:76:0b:db:2e:da:
68:9f:56:6c:88:b0:ab:56:d0:42:14:63:70:cb:68:
25:43:95:0b:5d:a4:b2:ea:74:a4:55:a2:e9:bf:21:
e2:1e:5e:e8:38:e0:e9:6c:01:15:30:c8:23:42:26:
16:49:6a:b1:6d:af:c1:bb:fb:2c:34:ea:f4:c2:9a:
b0:0a:66:59:57:b7:f5:9a:66:ef:6a:55:a7:32:91:
12:b7:17:07:79:5f:03:5c:fa:3a:c9:14:82:c4:75:
02:bb:5e:2c:86:30:ac:9f:58:7d:4a:79:7a:79:ff:
ac:9a:90:59:00:35:03:a0:1e:17:3b:47:9e:f3:5a:
81:2b:19:f5:49:0e:55:2a:79:42:d4:29:df:d7:ec:
cc:26:07:ac:f4:cd:76:ec:15:55:ac:6b:9f:79:43:
89:fe:24:8c:92:e2:af:b7:94:60:b2:1c:9e:7e:9e:
09:6f:f5:cf:c6:3b:e5:8d:d8:43:98:2b:fa:8f:7e:
a8:04:fe:fc:ea:7e:70:1f:a1:6a:60:e2:57:36:55:
9a:52:67:b9:ad:2b:8f:da:72:fd:db:1d:22:d5:08:
66:94:bf:e8:4f:25:43:50:88:fb:6a:0a:3b:23:42:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:3F:E0:19:E8:DE:A7:4D:1B:5C:F4:DC:54:7B:9D:6C:73:43:F4
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:61:a7:1e:51:ef:73:62:d2:fd:0b:18:44:76:84:12:36:
fb:1a:ad:bc:e4:0a:4e:b1:b6:3b:3b:6c:5a:89:8a:0e:d0:bc:
8b:76:15:af:52:16:5d:2e:41:9d:83:39:27:63:c8:cb:7f:8c:
6c:c3:33:02:a5:1f:8f:4a:b3:a7:0b:07:38:b8:7c:ec:4d:23:
b4:18:a4:39:f9:e5:07:89:5c:3b:dc:c9:2f:f6:c5:63:fd:37:
4e:5a:0b:28:fb:06:49:21:fe:02:53:85:09:a2:5f:00:a5:c1:
1b:1b:37:3a:3d:ca:47:cf:2b:5f:79:a9:77:d0:70:4b:f5:f3:
8d:6a:3a:77:40:a3:54:74:cb:3d:2e:86:c1:9c:8b:c3:7f:fa:
44:3d:7f:37:51:7e:54:91:73:57:e8:30:71:c5:48:14:cf:47:
ad:45:43:3b:7f:5a:87:38:fd:18:6e:6b:3f:1d:6a:15:6a:51:
41:4f:1c:ed:23:92:8a:49:77:8e:d8:53:46:8a:60:cb:05:71:
8a:26:03:cf:cf:a6:f1:36:ca:b7:a5:85:bc:12:39:30:6e:c8:
18:57:85:c0:5c:af:86:4c:20:0d:d5:6f:1d:15:95:e2:00:62:
e5:21:22:95:98:f3:07:91:12:d4:83:01:32:2e:69:86:18:e4:
72:fa:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:44 2025 by rpki-client