Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: BP+L/inCa90RlKeaBacI2yzRIhVbEErWTXKRaFBdScg=
Subject key identifier: FF:2B:17:78:1D:3B:42:8B:F6:4C:77:E8:38:CB:8A:26:AF:67:29:DF
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01988EEC86A7965589F326CC568A4D651F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 13:02:02 +0000
Manifest this update: Sat 09 Aug 2025 13:02:02 +0000
Manifest next update: Sun 10 Aug 2025 13:02:02 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: D/jvR1uQ1tAwJE0awGD39lkFzrMxx5vNXJ0kqku1ffc=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:86:a7:96:55:89:f3:26:cc:56:8a:4d:65:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Aug 9 13:02:02 2025 GMT
Not After : Aug 10 13:02:02 2025 GMT
Subject: CN=ff2b17781d3b428bf64c77e838cb8a26af6729df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:e2:b0:52:7f:2b:a0:0d:2d:94:bb:98:96:
4a:cf:80:43:ba:79:b0:88:ec:02:c0:ed:f7:e8:27:
03:07:1f:f1:50:93:5c:f5:bc:93:f4:b4:1b:fa:2c:
de:e6:66:f4:d5:48:69:44:6f:c8:0c:b4:08:73:1b:
bf:9e:b8:05:a9:87:f3:0b:d8:6b:fa:85:7a:d7:7c:
8a:48:63:4b:da:d5:ca:c7:1a:b3:8c:62:6d:eb:c7:
51:d5:67:24:34:05:82:5d:59:7a:3d:b5:23:39:c6:
0b:af:4c:2c:cc:74:5c:5d:66:96:c3:4a:8f:a3:ed:
66:d8:ff:6b:df:6c:8b:62:43:ae:c2:6e:9a:dd:de:
d8:dc:6c:15:80:fc:7b:f7:3b:e9:24:d3:db:d3:08:
d0:fe:1a:7c:aa:f5:2e:4a:81:f5:c6:f6:d0:30:63:
7c:ad:37:6b:67:ab:6b:23:49:8c:82:c4:2b:31:32:
f4:d3:b0:63:04:7c:70:16:dc:b2:f2:2f:e0:67:34:
11:dd:15:54:d1:69:b0:0d:e0:24:3c:6e:72:b2:97:
9e:a6:ed:b8:62:0d:00:35:f8:4d:e4:43:36:a1:5d:
bc:7c:f3:20:2a:1b:f3:14:ff:cc:1b:cd:6f:87:07:
1a:c5:64:6b:9c:5c:8a:6c:43:2b:14:4a:fe:c0:ad:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:17:78:1D:3B:42:8B:F6:4C:77:E8:38:CB:8A:26:AF:67:29:DF
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:7c:f0:da:9c:eb:08:da:55:00:75:21:01:fc:9d:56:ac:
48:5e:ae:c9:b1:8e:19:81:d7:f8:51:8a:11:4a:e0:57:c3:fb:
69:54:2f:2d:67:c1:b5:c9:53:b1:29:21:ec:3d:c5:eb:f7:18:
99:d5:ef:e1:17:c5:7c:b2:f0:d5:56:b7:87:60:e3:f5:03:80:
59:a3:6c:e0:30:44:62:dc:24:05:2b:17:bb:dc:80:c7:16:35:
5e:de:a1:db:a1:53:29:b2:b8:ba:76:1f:a7:6d:cc:b3:a2:0c:
1a:11:cd:4d:ed:c7:7f:d1:32:7c:09:d6:ab:de:4b:1e:e9:62:
1c:5e:a0:3a:65:60:92:3f:f1:2e:8c:45:80:0f:29:83:e4:1e:
a0:47:0a:fc:8f:56:f2:1f:81:0e:bc:08:ec:17:cb:f0:e0:a8:
d0:3e:3b:e1:12:70:e5:35:8e:99:01:db:ac:cf:7c:a9:0d:9b:
84:4f:ef:cf:c6:89:6c:9a:4b:95:fc:f2:9a:87:fa:4b:dc:93:
67:16:e1:f3:fd:c6:7c:21:b4:27:68:dd:e0:48:57:7d:01:66:
a9:40:05:03:09:6d:ec:95:53:f6:2f:aa:66:a0:30:f6:1d:85:
e4:16:a9:b8:58:92:cb:85:2d:50:55:21:fd:e0:77:08:71:0c:
1b:a4:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:42 2025 by rpki-client