Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: PG31F9vRg3sBe+Xm16jAfNsGw48oW8VHuqlyb81rMN8=
Subject key identifier: 49:E4:5D:74:66:38:55:C4:1D:C2:CC:5D:3E:B1:66:07:B2:A0:85:EF
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0197B77C60ECFB07414504F2BD9DB0AC1EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0228
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: CdOvqAKvL6sBjkoFKAp+SIZG2XiEP8S8QKArfPNJ1F0=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:60:ec:fb:07:41:45:04:f2:bd:9d:b0:ac:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=49e45d74663855c41dc2cc5d3eb16607b2a085ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:ce:fd:e5:98:3c:c6:b7:9b:e4:d9:ab:2a:
b4:1d:33:58:3f:5d:e1:fe:19:f0:9b:aa:ee:2b:b0:
27:d4:94:eb:e6:85:89:87:6b:3f:24:bc:ca:21:93:
da:22:94:b1:de:ae:88:85:04:37:cf:72:ad:35:3c:
d8:be:a7:5e:9a:4f:39:13:b8:99:33:ee:78:3f:64:
6f:cf:26:70:18:ce:24:a9:4b:6d:99:67:12:e8:9c:
7d:53:d0:e7:46:51:54:8c:5b:72:91:e0:9d:b7:54:
59:3a:46:2a:ec:df:a4:6f:52:ed:d3:4e:63:05:ac:
25:ba:0b:f1:19:78:a7:d4:fa:c8:c7:a8:bf:8a:d8:
c2:e9:ac:ee:04:00:e9:d8:81:11:63:2e:c7:4a:9e:
27:f2:67:21:f8:a8:ae:9d:88:e7:4e:68:47:5b:94:
c0:43:01:23:20:28:c5:fb:b7:34:16:42:37:f9:fd:
48:a1:bb:14:8c:9e:ae:79:17:72:46:8e:c3:b9:69:
61:dd:ac:01:a2:8a:e6:9b:07:1b:ee:a6:82:b2:10:
af:19:38:58:d0:d0:ea:2a:a0:93:b6:66:5a:16:ea:
09:07:10:ef:65:e7:40:be:0d:14:2c:ab:11:ad:6b:
55:8d:7a:aa:e8:94:b2:16:a0:73:ca:5b:a1:cc:89:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:5D:74:66:38:55:C4:1D:C2:CC:5D:3E:B1:66:07:B2:A0:85:EF
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:16:a3:dd:a6:e9:2c:5c:9d:37:54:07:69:a6:8b:af:06:e3:
76:51:3c:5f:8c:9e:95:b9:27:f5:d0:21:f3:43:ae:d6:49:58:
5d:5b:88:4d:10:d1:9f:62:e7:30:f4:b7:d1:57:84:de:14:d4:
e0:98:bc:a7:48:c0:51:48:9a:77:c5:96:42:d9:62:15:da:db:
98:15:0e:82:94:0b:27:c4:95:26:ab:64:9e:45:48:d1:6f:fc:
c6:a6:f5:85:d1:a9:01:b2:e3:09:71:9c:2e:32:54:cc:55:a7:
db:34:fc:3b:87:08:e7:3f:4e:ae:7e:74:4a:ee:b3:0d:25:eb:
40:df:84:ce:12:19:e5:38:a7:58:7f:5b:ba:04:8a:da:ff:02:
0d:41:99:e6:02:0a:0f:83:95:85:6f:b0:b6:99:8f:42:9b:0d:
09:0f:cc:85:5d:13:89:81:57:08:f4:a8:28:72:99:a3:6a:6a:
cc:ac:af:92:ae:dd:de:97:fb:21:e9:f3:f6:8f:bf:30:3e:0e:
af:0b:f5:41:ff:ea:d4:d3:d3:7a:b4:8d:2a:1d:00:5e:83:13:
58:24:9a:99:19:9d:f2:6a:94:79:e5:5c:85:40:25:3c:65:a0:
d3:88:79:36:fd:d5:48:11:63:82:9b:d7:ff:4e:e1:cc:25:a3:
fa:5e:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:43 2025 by rpki-client