Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: 648ZuzeKDKC+XJPwEKXl895pcT2GCcDG11FPuzjIw1E=
Subject key identifier: 1E:6A:5D:BD:6A:B5:2D:19:CC:61:27:88:CE:44:8F:D0:2B:42:88:F6
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 0197B6A092F837CDC3652F73EE1E8BFDD6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: UlNdgEUGVPcuo8hGexTBmXL4TadATzV5UhkB7qmTfXo=)
2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:92:f8:37:cd:c3:65:2f:73:ee:1e:8b:fd:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=1e6a5dbd6ab52d19cc612788ce448fd02b4288f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:f9:f0:d8:9a:fa:c2:52:4b:30:bd:7c:b1:
c9:6f:e5:e9:79:d0:b0:90:d6:c2:27:ac:ad:65:52:
32:6b:23:ea:34:15:5b:3e:2a:a0:50:8f:8a:35:30:
df:6a:e2:61:29:b8:15:f4:d3:e1:68:c4:58:c7:da:
07:e9:f6:13:68:e1:2c:97:63:73:a2:62:e2:ef:9e:
9c:84:dc:df:0e:b2:7d:2a:20:b6:17:3f:2e:83:72:
66:8d:ec:d7:bb:97:09:f7:0c:3b:39:50:5b:bf:d2:
ab:0c:ed:79:8d:5a:a1:cc:c2:c4:c5:99:8c:e3:0c:
dc:3e:53:b2:5b:32:75:18:18:25:c4:34:ae:3c:18:
8e:7d:05:2a:92:e6:df:fe:bc:b4:98:68:5f:ff:14:
fa:b8:24:ce:a6:aa:3a:14:58:f6:b7:b2:89:38:f4:
a4:5a:71:80:7f:76:a1:1b:67:55:12:73:cc:ca:c0:
21:05:94:30:4d:21:ef:49:e6:af:03:bf:65:32:a2:
dc:31:47:47:88:b8:0b:98:70:c0:aa:ee:ea:6b:40:
ad:71:e1:46:88:93:94:49:9e:95:70:55:41:4b:36:
a2:89:18:c5:f3:2d:b8:60:80:b8:eb:d2:c1:6e:d3:
49:98:ac:9d:cb:53:40:11:65:c8:37:2d:5e:56:a0:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:5D:BD:6A:B5:2D:19:CC:61:27:88:CE:44:8F:D0:2B:42:88:F6
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:70:31:63:31:2e:28:22:a1:b4:b3:d8:65:08:4b:4c:35:
d4:d2:4c:26:8f:c6:50:ce:6c:b6:62:43:65:52:5d:1b:9b:40:
fe:46:cc:2f:55:c7:93:23:7b:f7:9e:65:33:ac:74:b4:52:a9:
81:93:16:0b:44:33:11:43:ff:6e:95:ba:66:e1:24:51:b0:54:
d3:da:75:be:7c:3b:ee:9b:d2:c5:97:f3:20:74:b3:24:18:88:
2d:e8:4a:20:e8:f3:6a:31:e2:5b:79:2b:e3:4d:15:74:c4:f0:
d2:ae:00:de:da:2d:10:ca:63:f1:a1:73:9c:8f:e9:67:ad:57:
04:a7:5d:93:a6:95:eb:9f:ec:dc:50:ce:ff:b5:ec:d5:17:5e:
e1:21:95:7d:28:a4:06:7c:5c:f2:8b:d3:92:91:2d:31:81:55:
9a:d5:95:93:e6:ee:89:76:4c:ef:0c:4c:fc:8f:b6:52:ad:05:
ac:f5:57:86:2b:12:16:b2:24:c9:ce:c1:f4:71:e5:b8:0f:5d:
e0:b7:11:e4:12:c1:b7:05:6f:31:d6:ea:37:c7:89:3c:ef:64:
06:df:62:83:14:18:b5:09:a0:a4:bb:56:f7:df:29:a1:84:48:
9d:3a:eb:8a:36:76:de:ba:a2:35:83:d9:a6:c4:4a:23:2c:dd:
73:ef:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:54 2025 by rpki-client