Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: 84gkhWmJm1MBvb46HawuuTi5j3tKQjluX0xTiWHQNsI=
Subject key identifier: FA:89:31:6B:99:80:B6:EC:D9:1A:98:94:47:B5:29:B6:AF:94:16:15
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0198D4E0061445C7132EC0D55A35922B51B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 113C
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: MrlShaLIy+jvklNm6uELNlPPscjeBSzA12bG1HRMTgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:06:14:45:c7:13:2e:c0:d5:5a:35:92:2b:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=fa89316b9980b6ecd91a989447b529b6af941615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:f0:d8:f2:e0:df:ce:a2:08:08:32:97:ef:
1a:2c:a5:76:77:96:ad:f1:54:aa:e4:aa:3a:d3:28:
ae:b8:90:38:42:37:99:cf:bc:b3:24:de:5c:ae:35:
d1:c4:6b:0f:f0:eb:18:e2:a9:99:bd:8a:ba:84:73:
1d:64:92:0b:1b:3d:d2:fc:b9:3a:bd:e8:4c:f6:cb:
d7:a3:87:62:6b:5f:cd:ae:44:6c:e4:c3:46:ec:8d:
9a:22:50:88:8a:35:d3:7e:db:9f:14:35:e9:b4:e9:
2b:4a:fd:ff:1c:3b:8c:1d:66:84:88:4a:a8:a4:81:
13:a9:a1:30:64:46:7c:e7:40:3e:99:1f:47:fa:1e:
12:3e:5c:6b:8f:f4:01:2d:88:31:14:33:1e:b9:27:
82:b0:9a:7b:b8:17:80:91:63:06:aa:86:68:30:1b:
b7:20:7d:c3:9f:59:72:2f:7c:35:40:1b:b2:b4:cc:
22:f4:69:40:79:f0:c5:e3:ee:10:9e:08:d4:c8:e6:
72:56:a1:40:92:c1:e7:4e:95:ae:e7:99:76:a4:fe:
30:38:4c:8f:f7:db:e0:13:71:26:90:01:cc:74:19:
d7:a0:84:81:e3:79:29:b2:b3:1a:0e:9e:65:fc:12:
2b:ea:05:6f:ae:d7:1b:5a:71:6e:6b:58:20:87:b5:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:31:6B:99:80:B6:EC:D9:1A:98:94:47:B5:29:B6:AF:94:16:15
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:00:11:52:6b:54:7c:fc:ba:5c:a1:35:3e:78:0e:71:cb:
cc:3e:c7:d7:ad:4c:49:fd:77:3d:78:0c:b2:35:cf:53:40:88:
98:de:5d:de:a0:50:17:77:36:5f:d4:df:45:af:63:24:b4:21:
c5:2a:38:1c:d8:64:6e:20:a3:fb:8a:bc:01:cf:62:2c:cd:ab:
26:33:2b:86:99:8b:38:b8:3c:1b:97:72:0a:aa:94:f0:36:fc:
62:22:66:36:5d:78:37:dc:a4:b5:b9:c1:18:b8:52:03:31:3c:
e3:a3:19:0f:3a:45:fe:7c:1c:1f:59:f4:cb:f6:58:2b:de:e9:
c5:0e:0e:c4:07:3e:c3:9a:fe:c4:af:f5:d2:a2:01:9f:4a:be:
aa:ac:b3:2f:7a:c4:4d:fd:b5:c1:79:6d:84:78:fd:b6:98:2f:
ea:31:70:0d:5a:3c:ac:ff:b4:7f:a2:b8:90:97:1c:33:f9:f5:
e3:b7:84:7b:a1:07:d9:77:3a:05:40:e2:6a:dc:e2:3d:81:9d:
09:fd:29:77:98:69:55:21:89:d8:05:d9:c5:f5:e7:09:06:a5:
94:f8:20:05:de:c2:9f:7c:3e:25:db:cb:49:4f:31:6b:67:cb:
25:51:e3:26:3b:c7:14:eb:26:d1:c3:a0:b9:ed:f0:66:1d:1b:
dc:aa:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:55 2025 by rpki-client