Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: seRZ59pOciFKAx2HI4fhFfHadpiQxZB1Nvfqf6Y5r/s=
Subject key identifier: 1C:26:E7:CA:E2:C7:DF:1A:AC:8C:F0:64:88:66:CC:98:77:28:DF:99
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 0198D5F1D0F39751717AE7C2AF8161B4F3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 02CD
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: Yg9ouCiu70qCMeTMQpcVrVwootA9JJjhTmix+nQALEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d0:f3:97:51:71:7a:e7:c2:af:81:61:b4:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=1c26e7cae2c7df1aac8cf0648866cc987728df99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:83:d7:ad:fe:f6:24:89:ab:8e:c6:0a:b3:
13:c3:12:e2:d0:26:59:02:cc:18:b6:ac:6e:85:5f:
41:ad:94:bc:bc:8b:4f:90:e2:ed:48:5e:37:e3:07:
7e:83:db:1b:b5:07:f2:12:84:2d:c9:5c:b8:89:e8:
b3:e5:3f:7d:5a:6c:5f:08:fb:fb:01:1f:ba:9d:08:
45:66:32:0b:2b:2a:0e:d3:aa:fa:3a:f4:31:0c:42:
5f:59:08:10:ff:41:d3:e0:30:e9:b9:7d:29:56:8e:
74:3e:e9:1f:d1:de:04:ff:54:fd:20:c0:40:91:ea:
42:74:d3:e0:fa:84:6d:f4:f6:1e:e7:82:90:35:9a:
de:33:68:2c:19:df:25:88:ee:bc:c9:a5:60:dd:8c:
bf:33:04:61:2c:f1:94:39:20:e5:b4:80:28:8c:98:
c8:2f:af:0d:8b:0e:7a:eb:98:fb:d3:6a:39:2a:c2:
a1:61:8d:2b:86:5e:99:3c:cc:75:f1:1c:50:8c:2c:
5c:e5:0b:22:97:28:e2:20:62:29:a2:ca:71:96:eb:
83:05:6b:b3:31:f6:c7:04:22:e6:8c:09:fe:32:af:
29:b2:ae:bf:92:2c:ac:67:02:72:d0:62:f7:66:09:
e0:d3:7e:86:ed:98:d7:a0:f7:07:9a:8e:40:99:7a:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:26:E7:CA:E2:C7:DF:1A:AC:8C:F0:64:88:66:CC:98:77:28:DF:99
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:cf:67:45:4c:a7:2e:00:da:24:a8:91:e0:09:ec:06:a8:
41:46:a9:2f:94:7e:33:f5:c0:52:45:13:1c:2f:51:e9:39:ac:
d1:ee:90:59:17:9d:64:a5:54:2f:42:f0:ca:21:3a:74:bf:b6:
1c:d3:44:92:72:ce:ef:86:f3:91:90:72:47:a0:3d:43:0d:67:
5a:13:5d:a6:7f:d7:ee:a0:09:54:9e:79:52:99:ff:20:2b:d6:
4b:f6:60:37:a1:f1:a4:c9:ea:5d:00:91:b6:c2:af:79:23:e8:
14:33:5c:99:10:40:3e:25:81:e7:39:86:db:02:69:b8:d5:5d:
ae:28:b5:24:cf:5e:e5:aa:7a:a8:5a:82:17:25:e3:dc:22:33:
f7:06:bb:56:b2:9e:1f:b6:4f:f0:c2:3c:db:70:74:c0:73:b9:
44:be:65:24:a1:a8:47:aa:68:77:1c:69:cb:5a:57:91:b2:5d:
1c:76:f0:9d:9e:82:25:aa:34:1b:8d:f4:76:65:cf:69:47:f7:
e8:cf:84:56:03:9a:cf:7e:9e:25:25:d1:65:a7:ee:fc:2b:52:
83:de:f2:4c:e3:17:49:d3:11:69:1d:0e:ba:a6:ca:35:af:41:
c7:f5:35:a9:26:70:0c:d4:9d:51:5c:7a:19:7b:3f:b0:25:97:
cd:e7:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:54 2025 by rpki-client