Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: PYs/2YXGpw1pkslkBJr4DEH/LMwfd/YQDkVRH+KVtiY=
Subject key identifier: 39:FB:37:6B:AE:2C:DF:3B:A6:58:3B:1A:6D:52:4E:C3:57:98:FD:48
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0198D472B9AC9ECB3C4CE687B7782DF720F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 01E3
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: p9NMKM5pM8ak/a4odYJ/gNaOzYDsrV+Qgz6/8jDwc64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b9:ac:9e:cb:3c:4c:e6:87:b7:78:2d:f7:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=39fb376bae2cdf3ba6583b1a6d524ec35798fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:be:57:d5:8d:83:f6:08:c8:2f:75:c1:64:
58:cb:c7:f5:f0:9c:ed:06:2b:13:45:f1:e3:05:9b:
fe:a8:03:16:3a:f7:5a:af:28:52:98:5d:e6:a3:cd:
c1:02:15:e2:96:15:3a:e0:c9:62:a1:79:e0:e9:3f:
9c:96:52:ca:70:19:59:ed:89:38:89:88:6b:8d:49:
8d:1d:6c:2d:67:70:f8:a5:78:11:80:5a:bd:d2:97:
d2:13:6f:e1:f1:67:31:4b:1a:76:4f:f3:73:25:76:
8e:f8:13:ee:c7:2d:52:44:8f:ca:09:39:cf:97:29:
45:52:5b:72:13:60:5c:00:64:6f:4a:2f:9b:fd:be:
6b:7f:6a:d0:5b:ce:ed:c0:4f:ff:2a:76:be:d9:62:
4a:9e:84:d7:09:67:a6:01:e8:64:2c:71:a8:6d:a7:
a0:27:19:c9:16:f6:9e:b2:2a:b2:a6:03:ba:b7:ee:
34:a1:95:4c:f5:ac:c4:51:de:5c:b3:8b:e1:01:01:
8b:80:fc:32:54:32:ef:2f:35:0e:dd:06:29:df:fb:
51:97:62:6e:da:d3:09:e9:e6:40:cd:30:67:1c:47:
97:f6:29:40:09:a8:d4:df:3c:0b:39:e7:15:c5:8d:
69:6e:99:af:ae:0c:ec:11:74:61:60:c9:08:a0:d0:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:37:6B:AE:2C:DF:3B:A6:58:3B:1A:6D:52:4E:C3:57:98:FD:48
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:96:1f:12:74:a0:be:98:dc:72:f9:89:19:05:ae:6a:fe:c8:
9c:6f:de:66:ba:d6:97:df:d2:43:e7:ed:39:fa:8e:4f:cb:97:
22:36:2f:56:21:33:1b:8a:e8:16:26:53:83:05:9a:bd:2b:95:
54:cd:38:58:12:fb:ad:c5:35:60:14:69:60:8c:b6:bc:11:53:
d6:78:f6:c3:33:42:16:9e:2f:da:10:c1:64:3b:77:03:40:51:
51:e0:af:36:5b:b4:20:ab:7b:99:57:10:cd:b8:dc:35:ee:1d:
98:ea:5b:28:9a:19:5a:94:1f:d9:0b:35:84:e2:d3:93:57:2e:
47:aa:ec:f4:37:65:39:ac:45:e2:48:f7:b5:08:50:42:f7:17:
19:d7:d3:db:63:65:0b:4f:b6:88:ec:85:a2:09:76:80:50:15:
2b:90:60:97:67:00:a8:3f:dd:08:97:6e:42:22:cd:69:c5:c9:
78:60:ab:fd:50:86:cc:19:85:a9:c0:6f:7c:35:c5:76:03:cc:
28:81:65:1d:fd:92:fa:f6:b1:a2:a4:b1:91:c2:62:b4:b9:50:
f1:a2:66:f3:ff:dd:ab:2b:b3:d8:2f:67:c5:c6:5b:d4:4f:d4:
d9:fc:8e:54:f5:a6:47:ad:f8:c0:64:78:a1:83:ab:28:40:68:
e9:ca:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:53 2025 by rpki-client