Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: p/q/j+WCRkQBbNtoMxouvXfQW/bcpKCZNTXp/95ZC6Y=
Subject key identifier: F3:69:47:A1:5B:4A:39:4C:49:E6:CD:D6:03:C4:F1:FA:E6:D4:BF:CD
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019881682CDD513247AB7725D1B46D523D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 22:02:24 +0000
Manifest this update: Wed 06 Aug 2025 22:02:24 +0000
Manifest next update: Thu 07 Aug 2025 22:02:24 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: XIfyiTONrWoXgzlyGWTU7RZOf3aOI/201TYJQOyKJjk=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:2c:dd:51:32:47:ab:77:25:d1:b4:6d:52:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Aug 6 22:02:24 2025 GMT
Not After : Aug 7 22:02:24 2025 GMT
Subject: CN=f36947a15b4a394c49e6cdd603c4f1fae6d4bfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:1e:a2:b2:bd:0c:fd:7d:8a:18:e6:50:f6:
2d:68:64:20:e3:66:96:90:7c:34:83:df:e8:bb:7f:
1d:1d:e9:03:14:a9:31:4d:5b:c1:a3:93:6f:dd:21:
54:e5:c7:99:6a:5c:bf:a6:fe:6c:cd:6b:d2:6a:8a:
e5:67:46:a1:bf:ba:7b:7b:a5:94:2d:af:76:5b:fb:
62:4c:37:ea:2f:78:44:19:dd:5a:68:02:9a:59:ad:
8e:2d:a2:3c:e9:44:bc:46:9b:e1:05:0f:ca:47:df:
a7:90:a1:f2:82:db:6e:bf:2b:b3:ad:84:6f:5b:dd:
d9:00:1b:b6:f9:a3:7b:b3:4a:cd:cf:d8:31:48:59:
19:aa:db:1e:af:40:d2:43:87:72:63:8d:1a:49:17:
30:8a:08:80:b5:e0:88:34:1f:b0:d7:8a:6c:f8:72:
fd:5b:41:e8:27:4d:77:b2:86:14:e8:b0:6e:ee:36:
10:5f:36:19:d7:6b:cb:e3:87:30:be:fd:e5:de:13:
03:e3:9d:b9:60:d5:0d:21:a7:b2:97:96:c2:5a:83:
6c:fa:28:63:a7:41:75:7e:89:fd:6c:9a:19:bb:e3:
f8:89:c5:4b:91:ea:f1:30:f1:b8:5d:e4:5f:cb:30:
28:0a:bd:dc:ac:82:b1:90:f9:05:17:f8:a5:e3:3a:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:47:A1:5B:4A:39:4C:49:E6:CD:D6:03:C4:F1:FA:E6:D4:BF:CD
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e2:f2:44:69:57:93:ff:14:77:f7:f2:be:0d:a8:42:bd:e0:
1c:e9:e4:b5:f7:31:76:88:47:63:bb:06:d1:fe:71:ba:7b:80:
12:f4:c5:26:fc:fe:14:d0:5f:95:91:de:97:1b:85:7e:1a:ec:
07:44:bd:c4:45:48:43:68:9f:6d:cc:c9:c0:9a:48:9e:1c:c7:
2d:1c:5c:87:8d:fc:8f:35:2e:75:60:87:2b:1e:4c:7d:e6:f9:
b8:69:79:b0:0b:ef:92:4f:9e:90:a2:f1:bc:a2:60:20:c4:ea:
38:c7:c0:21:87:0f:bb:34:15:99:61:7e:ec:0b:21:33:09:c3:
99:87:6b:c0:80:a6:e7:18:a5:86:59:b3:e5:fe:54:d6:76:85:
3d:8e:17:4e:49:24:80:ce:45:bf:d0:40:bc:1f:e9:36:b0:bb:
37:6c:51:6e:4d:ba:70:2c:71:8c:04:97:9f:65:c3:0b:28:8b:
51:ba:d7:ec:46:c1:f4:e5:4d:85:dc:78:72:dd:75:3f:05:80:
e4:71:e0:00:37:5e:dd:b8:9b:41:de:1a:2e:0f:c9:79:6a:a3:
87:e3:68:97:ee:50:5b:26:1f:b7:a2:88:5c:77:d6:4e:f6:47:
98:ce:a5:db:bc:5d:77:9c:1b:9f:45:4f:dc:6c:2c:89:13:e9:
51:82:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:20 2025 by rpki-client