Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: mIbonYjCBko3U6NN7dzpxOV7VA/pDPtBjt3rzsHhPOk=
Subject key identifier: 09:05:57:8E:A2:0C:C4:67:DB:5D:1B:3C:1F:93:D4:82:35:6E:02:4D
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 0197B63278C8E4E4DE76052AB0B35D85049A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 0F7C
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: lmS6HNu4cJam3EfIn0y9JPXH1gLPL8zS6cIQR8gQobU=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:78:c8:e4:e4:de:76:05:2a:b0:b3:5d:85:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=0905578ea20cc467db5d1b3c1f93d482356e024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:a9:ee:68:1d:c0:c3:30:82:a5:52:14:1c:
1c:6f:ef:77:8d:6b:ed:55:51:74:8c:73:a1:08:91:
d0:0d:48:b8:7a:9a:e6:a8:a3:ba:30:7b:de:fd:fb:
59:6f:d9:c3:f1:ec:7c:08:2c:3f:02:77:af:54:36:
b6:f6:77:ae:83:e4:02:e1:b4:a2:04:9c:08:11:be:
a2:90:82:49:3c:10:01:ea:ca:b2:1e:2e:e3:5e:28:
18:70:5f:5c:99:fa:b4:34:9f:7e:fc:84:e8:2c:bd:
e6:13:f5:b5:4f:ca:65:e8:08:a1:df:d5:f3:3a:6e:
1f:dd:98:75:92:12:02:21:39:70:20:6e:47:e2:56:
bf:a7:bc:f1:2e:c0:32:00:a2:43:d7:06:46:c6:bd:
f1:bb:1f:0d:9f:52:a1:03:a4:c6:05:f9:b9:2d:cd:
34:da:2b:36:d7:f4:4f:cf:8e:55:42:0a:20:5d:a4:
da:66:f5:40:78:40:18:e2:b5:9a:de:84:ed:82:5d:
9f:f7:7f:b9:ae:1b:7e:c9:80:3d:54:78:0e:ba:92:
6d:dc:41:39:6d:8e:38:44:be:61:6e:51:c6:06:b6:
77:19:75:98:67:45:8f:b7:ee:26:00:ad:88:93:58:
9a:5e:9e:14:5f:8e:30:ee:ec:fb:da:45:70:b3:a3:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:57:8E:A2:0C:C4:67:DB:5D:1B:3C:1F:93:D4:82:35:6E:02:4D
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:82:93:4a:2c:03:f6:a0:6d:c5:37:13:af:9b:84:99:de:7c:
25:82:a2:2c:d9:e4:42:0e:ee:4d:fb:c9:31:89:c1:af:91:9b:
e0:4e:d6:96:56:ee:97:c9:9b:6c:18:89:a9:fd:c1:43:f7:2e:
1a:24:8d:39:d8:3a:74:85:b5:ac:1f:fd:69:4e:35:4e:53:e2:
ba:d6:bd:27:ce:5a:0a:0d:19:cf:d0:e9:91:88:81:c2:bd:74:
56:0c:5e:b4:a1:54:1a:c0:c5:2c:aa:66:73:23:70:59:62:42:
43:c3:a8:e4:c7:04:e9:6a:d6:08:b9:fa:0d:9b:3a:98:93:dc:
6c:28:bc:e7:a6:1b:b1:34:6a:ce:85:b9:91:b1:cb:f2:ad:7e:
37:63:c0:69:49:f2:7b:fd:5f:5b:59:95:ce:25:fb:f3:3c:1f:
3f:50:a7:85:0d:9e:f9:9e:49:35:5e:01:2c:a7:e6:f2:5a:3d:
85:ff:7e:13:3a:f7:59:37:ae:84:73:26:c5:4e:43:0c:2f:56:
6e:1f:14:55:29:a3:65:a0:3e:44:ef:dd:f0:8e:d1:46:3a:21:
a4:13:a0:af:d6:c8:8a:b1:b7:90:b5:fd:12:c3:c1:d8:2e:41:
be:c8:1d:cc:ce:07:2f:65:39:93:b3:8c:59:dd:ce:c2:d0:e5:
f7:e6:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:56 2025 by rpki-client