Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: Qr8j/HxsrL2BwXMUr0HEt8uACCqD1yC/lmmXnEgug14=
Subject key identifier: F1:40:B8:E6:D8:04:AD:C1:40:B1:E6:7C:E5:9F:3C:5C:59:1C:22:BF
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 0197B8213AB10AEC87B58AD956D6BF1EDCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 0239
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: p5WTc1Igu0z5dyGZC2GJO77BG3noHQW805dNJHiI4/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3a:b1:0a:ec:87:b5:8a:d9:56:d6:bf:1e:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=f140b8e6d804adc140b1e67ce59f3c5c591c22bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:fa:88:03:ef:03:1c:1f:a4:45:c2:85:69:
51:5a:94:4f:0f:ef:79:b2:71:be:c5:d8:48:30:07:
fb:6d:4d:f5:c0:49:33:d7:be:4d:54:8a:1c:99:a0:
ce:5b:e6:bc:45:e1:d6:1d:82:f3:cb:cd:aa:83:4a:
56:a3:45:6b:e5:c7:f8:d3:65:0e:7e:44:0c:85:e5:
46:dd:c5:75:af:4f:92:c4:f3:28:65:f7:ab:59:35:
ab:ac:94:a2:b8:82:04:78:1d:cc:4e:e0:5c:a3:6a:
a6:05:d7:86:96:eb:a7:85:71:22:c9:91:b1:ca:91:
58:67:03:1f:c0:95:ed:75:f4:7e:53:ae:89:e7:71:
c5:92:d5:c3:aa:b9:3f:8f:92:dc:58:88:5c:c1:9d:
17:fb:44:d5:6b:8f:50:0b:f5:d9:0e:b8:26:36:74:
24:79:e3:23:84:e1:5c:36:64:00:81:5c:43:65:f7:
58:86:38:89:73:6c:e1:53:ab:d0:54:9b:ef:0d:0b:
dc:79:f7:e6:07:5d:f9:09:69:7b:d7:e3:88:12:f2:
f5:9d:f6:84:ed:68:cb:e7:4a:97:16:f4:f8:64:fd:
4a:df:ef:18:c5:7d:ea:84:2e:6a:a5:85:7c:60:0c:
69:44:53:bb:cb:68:9c:67:15:95:66:fc:43:b1:14:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:B8:E6:D8:04:AD:C1:40:B1:E6:7C:E5:9F:3C:5C:59:1C:22:BF
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:44:44:f7:a9:13:12:95:c2:1e:1b:bd:d0:d8:ba:15:ff:
e5:84:d8:83:35:ce:50:ad:0d:24:5d:ac:0c:b4:e7:db:89:fe:
a6:ed:10:b2:93:0c:14:17:e1:2a:4d:bf:37:97:3b:d8:e0:d4:
23:34:f7:f9:26:32:22:55:1b:78:43:35:52:18:16:d5:59:4c:
55:85:09:c6:46:0a:5d:a2:66:fd:21:19:1e:e4:03:2c:e8:2d:
6a:d0:39:b4:8c:f2:d7:60:47:5a:75:bf:cd:72:5d:41:73:ff:
60:77:38:d4:00:7d:fb:c8:75:ad:7d:86:80:66:0a:0b:d3:6b:
f9:06:67:2f:30:cb:44:cb:31:aa:94:4d:a0:79:6a:07:27:26:
29:1c:19:ae:85:2b:4c:c9:a9:6e:04:1a:86:9d:51:5e:99:ee:
bc:a9:22:82:93:0c:c4:58:f6:e5:a8:77:da:5e:33:1f:0b:9c:
d5:44:65:d0:fe:37:b2:7f:97:c8:1b:f4:da:0b:0e:7c:40:9f:
da:5d:9b:53:51:97:12:45:ab:a8:47:71:71:68:94:fe:63:ed:
84:0d:d9:48:86:a0:d0:57:39:a7:59:9c:04:03:92:2e:cf:33:
09:8e:75:da:c9:33:c7:34:a8:7a:40:a6:0b:5b:dd:83:df:00:
34:29:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:35 2025 by rpki-client