Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: tpx9dkD24ie/Kf7H4/lLSf/jfnuga5rqWNftaqqCE1Y=
Subject key identifier: FC:8D:F2:50:13:9E:15:F3:2F:FA:64:46:0E:D1:E5:2F:7C:89:9C:3F
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 01976C2B3866AD9CC18A0922F3AE5A55F417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 13A1
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: zsScknMhtPwrZkj9GrUXmMZRH/uhZxGAXA+VhPg54AM=)
2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:38:66:ad:9c:c1:8a:09:22:f3:ae:5a:55:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=fc8df250139e15f32ffa64460ed1e52f7c899c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:a6:b7:f9:96:35:3f:bd:2a:9c:ff:cc:8a:
a5:3a:90:b3:48:69:96:78:16:00:64:2d:ff:a6:ff:
88:35:63:f9:ae:77:70:b2:3b:66:57:a9:7c:ff:75:
0c:89:db:61:05:ff:42:aa:cb:eb:43:b1:7e:88:63:
e6:29:b5:6b:57:2a:fa:2e:10:a8:10:90:df:c9:17:
87:31:8f:bd:c0:d6:fa:58:32:df:d1:4d:b3:39:aa:
89:78:0a:54:56:9d:ef:6f:ee:94:f9:77:81:bd:2b:
35:14:cc:d6:08:be:ef:ee:c6:05:0d:ca:a4:b0:a4:
66:b6:d7:4e:a4:f4:3f:fb:01:16:24:60:1a:6f:77:
ab:a5:55:93:43:90:23:f5:2d:7c:46:2c:34:6c:6b:
d8:19:5d:4c:d2:cd:50:76:47:f1:72:ff:5a:7e:dc:
ec:1f:8e:86:82:97:0a:c2:09:89:5d:20:c3:a3:b8:
07:44:65:0e:9b:3a:c8:4e:40:62:d2:40:39:af:ff:
f1:e3:43:43:c2:1a:82:1a:95:b5:49:1f:f8:cb:0d:
8d:9f:98:2a:b0:7e:e3:b0:3f:43:80:ea:a5:4d:5e:
a5:33:f6:0f:96:e1:43:c2:2d:a8:3d:c6:94:6c:09:
30:56:5d:12:3c:69:fc:67:21:1b:27:0c:0b:81:f6:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:F2:50:13:9E:15:F3:2F:FA:64:46:0E:D1:E5:2F:7C:89:9C:3F
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a9:0c:bf:1a:a0:19:85:fe:e9:94:f3:e9:b7:29:ff:d5:56:
5b:2a:0b:7c:e4:88:0f:1b:03:ce:1f:28:1e:e1:8b:ac:66:3e:
37:b3:71:4e:4e:c7:26:cf:c6:d5:52:4a:32:3f:6e:ae:c2:c9:
da:14:b6:06:8d:3b:a7:5d:e9:d5:18:a6:40:93:7d:8f:ba:46:
5c:07:79:24:8f:91:b0:c4:55:f0:70:a6:49:c2:4a:9d:8d:f3:
cf:00:6f:e2:91:8a:68:b8:49:a5:86:ea:67:4d:59:ec:b4:64:
50:bf:5a:1f:60:f9:f5:a2:e4:8b:59:a8:51:a6:84:9e:3f:ba:
e0:27:52:a3:b0:6c:46:18:e8:e8:66:0f:06:ef:a9:3b:4a:7b:
db:a8:3b:86:82:55:23:cd:d1:d5:29:7f:d8:61:a8:d1:96:ae:
37:d3:f6:f0:c8:3a:67:c9:8b:d4:2d:f3:66:14:2d:98:44:bb:
3b:ed:23:c1:29:5d:24:ae:10:8a:b2:ab:ef:b3:e1:f7:9d:ab:
a3:a1:9d:13:39:88:5a:4c:08:7f:36:34:eb:fd:c1:75:6e:32:
49:53:22:dd:4b:7f:88:28:21:bb:54:bd:93:9d:98:4b:47:57:
78:75:8c:6b:11:4a:51:8b:e5:00:94:0c:71:f4:77:18:2c:a6:
47:8e:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:43 2025 by rpki-client