Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: oUPJMvC6qPyhAHzb/lUgSuP8CORlrYI3dOJkwLa/JmY=
Subject key identifier: 88:F7:9E:00:53:6A:92:49:B5:06:DB:CD:0B:9A:42:91:7A:01:01:79
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 01989749CBC580945955CF8F51B7F69E5EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 067A
Signing time: Mon 11 Aug 2025 04:00:52 +0000
Manifest this update: Mon 11 Aug 2025 04:00:52 +0000
Manifest next update: Tue 12 Aug 2025 04:00:52 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: byV9Ae37FZhRjJ0uF+/65MrRAhzyEGokff10JG0WNTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:cb:c5:80:94:59:55:cf:8f:51:b7:f6:9e:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Aug 11 04:00:52 2025 GMT
Not After : Aug 12 04:00:52 2025 GMT
Subject: CN=88f79e00536a9249b506dbcd0b9a42917a010179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:ca:ec:7b:07:d9:8e:aa:54:3d:d7:d1:f7:
5a:29:66:59:e0:52:4d:28:4f:0c:6d:e9:e4:14:86:
3c:be:d6:11:0e:01:3e:f4:67:f3:46:9e:7f:61:f0:
96:4b:3d:56:cc:f7:a6:40:fc:0f:67:b9:1a:bd:14:
b8:bb:8a:3a:7c:84:06:8c:e7:b3:5d:56:ec:f0:7a:
d0:98:fd:42:40:9f:a4:8d:4a:4a:b8:71:14:53:cc:
24:db:31:d6:e3:9c:5b:89:f7:04:08:b6:57:72:6b:
9d:18:1c:5c:42:d3:97:2a:d9:b7:fe:4b:3f:ca:e2:
08:c5:43:46:ab:e1:c3:a8:55:e3:9a:35:ff:05:28:
c1:64:19:79:ac:37:d8:61:da:2e:5f:a8:2f:ae:c7:
1f:9a:c5:4c:82:c5:13:01:a9:55:a2:b2:64:71:fe:
ca:09:46:2a:54:98:d5:5f:18:cb:62:65:41:05:8e:
62:8b:a8:13:ac:55:cc:0c:4b:f1:aa:ce:a8:a5:3f:
57:66:eb:7b:ce:b2:4d:c1:b2:7f:e6:89:57:af:1f:
7c:2e:59:0c:d6:59:81:57:14:eb:fa:f0:45:a2:c9:
3b:9f:fa:55:34:55:74:63:d8:3a:ef:9e:65:a6:20:
dd:55:91:95:67:b7:c0:0d:a1:f4:99:88:5d:7c:59:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F7:9E:00:53:6A:92:49:B5:06:DB:CD:0B:9A:42:91:7A:01:01:79
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:98:4b:8f:a6:0e:aa:a3:8c:2e:f1:e0:11:7d:f7:2a:bf:
ae:96:50:5a:60:1d:94:52:54:35:07:a8:7a:50:a2:d5:e0:0e:
26:24:57:e2:c2:b7:e1:dd:2f:a8:0f:5e:02:74:22:d9:e2:e8:
93:cc:d3:94:38:cc:05:51:4b:19:86:27:86:1e:01:89:37:80:
ba:ea:97:1a:3b:e9:99:db:5f:78:93:e2:dd:4c:96:b3:39:ce:
4b:f9:81:ee:8d:30:94:64:ea:bd:d9:e1:e2:70:d3:e9:68:7b:
a1:21:85:b0:80:ff:58:fe:25:d3:54:ff:d3:0c:cb:f3:db:90:
1b:86:cd:e0:42:ce:b0:ba:cb:e5:31:8d:ad:f6:41:5d:e3:c6:
b4:57:23:b7:f8:49:a3:99:7e:32:fb:c0:27:2b:50:fc:b9:ab:
08:3c:f5:b8:7f:3c:56:82:92:81:18:d1:88:65:cd:38:c1:76:
5e:54:0b:4d:c2:6c:97:82:10:f6:36:1e:e8:1d:b1:28:68:b3:
11:4f:3b:15:15:c1:8e:0e:84:71:39:7f:1e:f9:dd:d9:16:37:
6c:3b:7d:42:61:aa:4d:32:8a:17:47:fa:fb:8f:2a:0a:91:bc:
48:eb:2a:2c:b2:a6:b0:ef:aa:00:43:b8:57:2f:f0:29:58:db:
00:80:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:06 2025 by rpki-client