Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: TwrSMyWqu4UEok/qIJNFvc4rlgtLU8VQIdcnf6yKYNk=
Subject key identifier: 0D:8F:25:1F:D7:C4:48:C9:83:B0:5C:D1:8E:55:9A:C3:4D:17:70:71
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01976BF4636628F5B84246AEF71D2BE65B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 01:01:07 +0000
Manifest this update: Sat 14 Jun 2025 01:01:07 +0000
Manifest next update: Sun 15 Jun 2025 01:01:07 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: jNNN8LsRPRnUWAKp7j7zc2mLLpkTd8Tv3NNqltD6yxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:63:66:28:f5:b8:42:46:ae:f7:1d:2b:e6:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jun 14 01:01:07 2025 GMT
Not After : Jun 15 01:01:07 2025 GMT
Subject: CN=0d8f251fd7c448c983b05cd18e559ac34d177071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:74:19:27:53:be:07:06:43:78:68:21:6f:
27:ae:13:a2:55:c4:00:d4:4b:be:cf:37:ac:ae:45:
aa:0a:8b:69:8b:c8:ad:0a:dc:07:44:18:88:ad:90:
2c:c6:61:f8:7a:86:a1:a1:9e:a3:74:9e:9d:1a:b7:
70:6f:5b:cb:eb:a8:7a:d4:05:44:a9:dc:20:ec:91:
58:6a:9f:cf:fd:a8:db:49:7f:b5:c8:09:65:07:69:
9d:66:cf:06:4a:60:a2:a4:55:41:0b:ed:02:e6:92:
59:e2:10:44:92:0f:70:2a:d2:ba:99:81:a7:14:b7:
1c:29:ad:e8:87:1d:f8:76:9b:ac:2f:27:b4:41:f6:
4e:cc:2c:87:84:93:40:c5:9d:22:9a:a9:65:73:5b:
a6:1d:a8:ba:ac:61:bf:4d:ac:f8:8a:ba:63:b5:b3:
ae:89:30:74:e8:c2:af:f1:f5:57:30:e0:0a:50:07:
f5:21:d4:85:2d:8d:12:48:bb:a0:72:5f:a8:91:18:
2d:d9:0b:a5:8d:e6:ea:51:05:44:36:a3:ff:bd:60:
dd:a1:7e:fd:41:d8:38:17:0d:be:76:1e:f5:d2:ca:
74:79:b0:88:20:ba:c1:1d:51:10:6c:0f:d8:4e:10:
7d:ed:b2:b2:d5:8b:83:c7:3f:35:23:9b:12:28:91:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:25:1F:D7:C4:48:C9:83:B0:5C:D1:8E:55:9A:C3:4D:17:70:71
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:70:6d:1d:a8:1b:82:2d:61:b1:b4:13:32:3c:5a:80:a3:
8e:36:16:14:89:d0:2e:b9:eb:54:00:03:55:e5:6b:73:96:8a:
53:e7:c3:ea:57:6c:75:43:88:d2:9f:46:aa:bf:0a:58:54:6b:
fa:81:16:24:95:5f:cc:f3:4f:02:b5:4c:6b:b6:65:3b:0a:24:
ab:cc:b1:dd:5c:07:c6:93:10:67:43:dd:7b:87:c4:96:95:ad:
cd:02:19:97:a0:54:95:ec:e3:a3:3b:3b:71:86:32:9e:33:fd:
44:15:70:c9:0e:dd:d2:91:b4:7b:e7:08:af:6e:ba:b9:88:b3:
28:5c:c7:c3:30:33:fe:0d:05:d8:a7:e0:99:23:93:77:37:00:
c2:14:52:3e:4e:c4:7a:f2:76:cf:4f:33:9a:6e:e8:03:7a:85:
03:c8:35:fc:51:54:0b:22:48:a3:c3:f5:59:53:01:c1:13:6a:
38:f3:70:bb:59:a7:c4:73:ba:05:26:40:98:d9:f7:9e:60:2b:
14:e5:aa:59:15:2b:1e:fc:2b:c6:cd:03:d6:a6:7e:49:18:a7:
c7:07:cc:c1:22:29:fb:77:f0:ee:97:76:f0:e9:c3:e3:67:fc:
34:f7:bd:be:d0:bb:83:23:75:ac:c2:65:78:83:66:42:f1:6f:
6f:8b:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:23:01 2025 by rpki-client