Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: /AWBjL/pHJzciCZYhpSTe/yPty+3w2k4DgnvwixfY70=
Subject key identifier: D4:99:ED:13:51:91:AF:B7:C7:84:14:25:A1:F3:97:4C:63:26:5A:AD
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01989F3AB4D24C091A340ABDEE9A32E5321D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1627
Signing time: Tue 12 Aug 2025 17:01:21 +0000
Manifest this update: Tue 12 Aug 2025 17:01:21 +0000
Manifest next update: Wed 13 Aug 2025 17:01:21 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: lgbOph2AW1dpg6tPJekGE5AXIOgAgslMkwVJYntjypI=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:b4:d2:4c:09:1a:34:0a:bd:ee:9a:32:e5:32:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Aug 12 17:01:21 2025 GMT
Not After : Aug 13 17:01:21 2025 GMT
Subject: CN=d499ed135191afb7c7841425a1f3974c63265aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:0b:c3:aa:4d:a5:77:73:8b:89:2b:a2:af:
30:11:8e:0b:d2:d5:6e:24:d2:7f:8e:d0:4e:8e:84:
28:aa:27:4d:cc:67:20:15:26:57:aa:7c:23:ef:cd:
89:27:2d:28:5d:b1:a7:db:1c:24:25:61:f8:6d:3a:
8d:fb:6d:f3:9d:bf:d4:63:97:56:3d:fb:1d:e5:56:
3d:67:12:06:d5:47:a7:88:9e:6c:7b:44:cc:97:1e:
8e:86:76:9e:f1:d3:82:c5:6d:4a:85:8c:74:9f:db:
e1:28:3f:2c:12:f8:cf:83:23:a4:e1:38:a2:dc:af:
80:e6:69:92:06:3f:33:d1:c8:53:a8:e0:d5:2d:87:
cd:3c:82:a7:69:88:9d:3b:1e:b1:97:21:94:72:b9:
d7:57:49:d5:af:bc:89:fb:1c:c5:81:58:49:95:4c:
df:02:08:63:c3:02:a8:35:60:c2:b6:7e:e9:fd:ef:
44:38:2a:8b:12:6f:d9:e3:2a:d6:47:c6:66:68:ea:
b3:9b:d9:2c:65:d1:d8:af:ab:d7:61:69:27:db:4d:
45:8e:76:4e:5f:50:9d:74:f1:87:f2:3c:77:68:81:
4d:31:ac:d9:45:1d:4a:61:24:71:b7:73:8d:f3:c0:
ce:db:95:9b:82:31:1f:72:7c:96:10:14:20:86:23:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:ED:13:51:91:AF:B7:C7:84:14:25:A1:F3:97:4C:63:26:5A:AD
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:21:ad:18:35:fc:7d:d9:95:37:44:a3:08:73:d4:6d:3a:
0e:26:5a:82:be:7f:98:a8:f7:f9:39:e4:cb:38:75:db:f0:ef:
78:22:d0:3c:b8:c5:09:cc:b9:18:42:08:b6:c6:d9:e7:c8:a9:
98:b7:29:51:18:c1:3a:e2:0d:b0:81:4e:a2:fc:8d:89:b8:3e:
f1:36:58:d5:8f:6e:d0:0b:10:9d:10:59:a3:ec:12:20:8f:29:
b2:bf:b0:cc:77:90:7a:0d:29:0b:56:3e:47:14:a6:67:5e:71:
b3:21:67:99:06:37:e9:de:ce:d5:96:71:e5:a0:73:97:2e:d6:
b5:4a:70:9a:cc:ae:33:a8:b0:64:5b:2f:32:83:32:98:61:d1:
47:2d:f1:78:bb:76:e5:c2:89:82:7c:83:76:7b:77:45:84:16:
71:8e:79:2d:0e:aa:0f:9f:af:be:08:ad:f2:54:f4:74:90:71:
0f:cf:16:bc:83:31:49:35:44:76:43:76:a8:fe:63:10:14:53:
48:25:55:0b:8b:9a:a5:d4:5a:19:0e:70:b7:3c:12:a0:36:a1:
ab:15:3f:0a:4d:65:3f:88:97:6e:78:ee:36:4c:cd:01:1e:35:
2e:d1:d1:9e:5b:4d:01:97:1e:3f:6e:bf:79:2a:e6:48:7d:c8:
0b:51:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:26 2025 by rpki-client