Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: j87BN/N/+Hug24O1IBM61VMW7NGw8mGM78ye6oO1i2g=
Subject key identifier: FF:1F:11:A8:FE:77:CD:E6:07:F2:7A:B5:12:B5:78:62:A2:FC:5B:30
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0198D73B7972E679EDDD37F367D967C0255B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 02BD
Signing time: Sat 23 Aug 2025 14:00:55 +0000
Manifest this update: Sat 23 Aug 2025 14:00:55 +0000
Manifest next update: Sun 24 Aug 2025 14:00:55 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: OOKBNBFJEuP5/WvNQ8x1JTf/QEmbQfNNBRTklxWQn6I=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:79:72:e6:79:ed:dd:37:f3:67:d9:67:c0:25:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Aug 23 14:00:55 2025 GMT
Not After : Aug 24 14:00:55 2025 GMT
Subject: CN=ff1f11a8fe77cde607f27ab512b57862a2fc5b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:34:a9:2e:a1:53:ac:8b:0b:62:6c:e3:22:
85:e9:6e:1b:f5:7b:47:88:65:0c:8c:6a:cb:b1:65:
4d:f1:1a:99:20:d5:27:35:86:76:76:ce:c9:c5:1c:
2c:73:d4:e5:ed:26:13:54:22:7f:3b:18:03:b4:d0:
1d:14:b1:7f:9d:f2:2b:f7:02:52:9a:39:77:4c:22:
76:ae:37:81:14:84:91:42:ac:3c:75:51:56:5f:f3:
fd:d8:09:2f:e8:0b:d4:30:2e:2f:7b:cc:9d:74:5a:
55:66:76:3b:8a:ad:56:e0:01:ff:cc:ba:c5:b4:a9:
2b:8c:22:31:fa:5d:5e:cd:4d:af:1c:44:88:6e:5a:
3d:da:6b:7d:a1:e9:1a:ee:5d:a0:f8:7e:d8:97:ac:
93:1d:67:c1:fa:6c:db:d7:45:dc:58:96:a5:0e:64:
ae:42:2d:ee:fb:2c:b3:96:e4:b6:e0:b3:e6:8b:4c:
a9:a5:1d:f9:4e:67:bf:8c:66:c1:28:80:1d:e9:24:
ce:19:49:45:2d:d7:3d:c6:2c:8f:bf:7f:56:7f:ba:
38:91:16:5a:60:96:c0:3a:8b:e0:f2:0e:3a:81:00:
d6:c6:23:37:a2:16:72:4e:cd:3c:97:c8:57:84:38:
a4:ca:bf:cc:6c:20:26:35:96:df:e2:07:27:24:01:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:11:A8:FE:77:CD:E6:07:F2:7A:B5:12:B5:78:62:A2:FC:5B:30
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:11:01:1e:53:f4:d6:eb:98:43:bd:c3:5e:de:cf:db:b2:85:
fa:72:a2:57:96:74:db:59:13:d7:06:95:ad:57:20:3d:98:aa:
db:15:27:70:50:bb:70:34:73:e5:ec:22:7f:42:72:e7:12:c5:
7d:3e:0c:a8:2d:65:86:dd:18:9f:ad:f7:16:46:2f:ea:e9:bf:
a1:04:d2:89:ea:32:53:28:e9:df:74:f6:04:fd:cd:b2:34:9c:
de:91:bf:d5:24:fc:87:74:7a:6e:ae:a8:05:91:79:da:81:e0:
b9:e7:bf:ac:e6:56:3b:23:c3:c3:af:bc:42:1b:06:cc:e6:4a:
24:7d:4c:f1:72:1d:1a:1c:b0:c7:07:cd:33:14:d5:1b:77:aa:
7b:29:f6:75:37:56:2b:62:c1:50:28:17:85:a7:f5:08:eb:d3:
6b:9d:a8:e6:ba:1a:a3:f9:dd:66:68:5c:d1:ad:88:a7:f2:1c:
bb:fd:23:59:e7:e9:54:02:89:dc:84:ce:e5:32:ce:22:4a:5e:
95:1a:82:0d:6c:b0:e8:2e:e8:8c:22:34:c4:ba:48:d3:68:dd:
2c:c0:8f:be:94:4e:81:b0:5b:69:5a:42:b5:a2:91:7f:a9:21:
fb:cd:20:ee:2c:5a:d8:94:5b:6b:44:d4:09:56:72:b9:7e:5f:
f5:e7:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:59 2025 by rpki-client