Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: deXipi4NGZQGbTthPRrk3vbLnzYU6yHFvMc4F/Gbg3Y=
Subject key identifier: A7:7C:16:75:7A:6C:75:AC:8A:9E:81:FA:D4:60:64:DB:86:F2:6D:1F
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0198A04E16C00FD12A31FD1BF6A2D18FD9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 15BD
Signing time: Tue 12 Aug 2025 22:02:08 +0000
Manifest this update: Tue 12 Aug 2025 22:02:08 +0000
Manifest next update: Wed 13 Aug 2025 22:02:08 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: Rk5C70PmLaRGNryZImQn6S6Ucq20d1i8R/UtOECWOi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:16:c0:0f:d1:2a:31:fd:1b:f6:a2:d1:8f:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Aug 12 22:02:08 2025 GMT
Not After : Aug 13 22:02:08 2025 GMT
Subject: CN=a77c16757a6c75ac8a9e81fad46064db86f26d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:bb:71:71:32:63:e7:54:fc:0d:4b:df:0d:
d8:2e:9c:69:7d:24:f3:f4:87:d2:25:57:f6:3d:2c:
2f:31:41:c5:84:07:e7:eb:ec:5d:2f:d3:44:7a:8d:
36:5c:39:23:03:d4:0a:6d:a3:d8:15:a9:cc:5a:c2:
70:92:39:80:93:14:5e:8e:05:e2:a8:b0:37:38:15:
b8:ae:20:95:c8:6a:50:33:24:ba:69:96:7a:7e:88:
87:56:47:96:da:ec:09:59:db:78:4e:44:67:ca:e1:
06:23:26:09:2c:5a:3c:70:b4:92:f7:0a:21:30:b5:
75:51:55:49:e7:e2:df:48:37:15:5a:03:ac:8f:f4:
7e:6a:64:49:4d:31:cf:0b:a2:fc:ef:42:25:58:44:
f1:b9:75:17:8c:6c:81:b1:84:4f:cf:ba:90:23:a7:
80:d3:67:d0:c2:f5:4b:dc:15:20:00:c2:a8:6e:40:
02:69:0e:da:c6:78:70:df:28:79:60:ca:e8:b3:6b:
f9:9f:07:73:27:1c:95:61:1a:26:db:86:0b:43:c8:
90:ae:1b:7f:fa:73:fc:e1:27:ec:48:67:35:9b:2c:
55:f6:51:f7:38:d0:12:77:46:d6:26:96:bc:c1:66:
98:bf:c6:a9:50:50:0e:a5:97:b4:55:bd:d1:12:05:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:16:75:7A:6C:75:AC:8A:9E:81:FA:D4:60:64:DB:86:F2:6D:1F
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:8d:b0:d8:df:d2:5b:42:fe:34:50:f5:f4:cc:59:17:a2:
bf:6d:d7:83:d2:8e:d8:09:98:84:b1:30:a7:b7:49:5c:2c:4c:
ef:f5:85:cc:bf:44:2b:ee:b0:0b:5b:90:17:52:84:aa:fc:36:
de:69:e5:78:d1:e1:ee:14:e6:fd:d5:50:7a:ab:7f:52:45:0e:
dd:dc:d2:d3:67:06:4e:d8:5f:a2:94:50:9f:63:50:b1:71:76:
a8:d0:61:11:83:91:91:5b:82:90:85:6f:47:5f:30:fa:0b:2f:
da:05:b6:d0:18:97:9b:f8:9c:66:10:34:4d:91:81:4d:ca:70:
94:d6:3e:be:5f:5a:93:12:08:16:39:00:e9:46:34:86:e3:21:
7b:5f:05:0b:02:cd:65:fe:2e:19:37:8b:aa:d5:e4:24:67:df:
31:93:68:aa:10:68:3a:82:d1:c6:94:cb:b2:31:24:9e:3c:0a:
22:b6:e9:d9:51:29:7b:29:b6:3b:df:08:88:36:0e:7e:e7:59:
e3:cf:e0:09:de:31:78:c4:bd:1a:a4:2b:17:3b:77:a6:47:50:
ff:9b:a3:c8:99:69:f7:c6:09:26:f6:76:bf:65:60:8e:64:31:
ac:53:47:44:a5:d0:86:63:27:5e:f4:7e:fa:f4:3e:6c:f8:43:
4b:60:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:34 2025 by rpki-client