Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: +6yAIaO8w/Y65+ZbjG/U689UXxDAXBbSmeYWlW9r9fI=
Subject key identifier: 60:02:62:7C:56:C5:97:91:41:63:11:D0:A9:1D:B8:DD:BA:B1:41:B0
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 0199FC215876A082447160CF757715338512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 13C8
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: 2DW5beQ7oJcNj8DgwyaNeHirIBlW8OE0+ZNqzt0lMvQ=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:76:a0:82:44:71:60:cf:75:77:15:33:85:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=6002627c56c59791416311d0a91db8ddbab141b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b1:5c:58:18:3b:d2:cb:96:10:5f:0f:2d:ad:
e0:40:8a:7f:4f:24:49:85:b3:cb:dc:aa:b1:68:66:
e9:bd:a1:19:0f:7b:53:0c:5a:b0:55:18:6e:d4:fd:
92:8b:31:16:a8:34:6c:14:c5:fd:57:c3:92:db:a0:
7f:6a:3d:e0:1e:70:cd:94:56:d2:30:29:b2:1e:52:
a1:53:27:94:e4:d5:43:f9:e3:93:fa:87:c9:6b:b5:
6e:f7:2c:30:96:a4:92:c9:66:1b:9e:55:d0:ad:14:
6f:33:e8:7b:23:06:6b:ba:64:b7:e5:9f:e2:e4:bb:
1f:b0:36:23:26:35:5b:40:49:0e:d0:c0:1e:4f:79:
cd:56:bd:53:24:07:b3:5c:fe:83:f2:94:f3:33:1e:
0a:08:f5:5c:b4:5b:39:54:b1:89:f5:35:70:d9:b7:
45:26:26:55:38:5d:c8:90:1d:99:4d:e6:49:3d:78:
2c:14:72:b1:8a:ec:9f:a7:71:f5:74:07:be:9c:52:
8a:17:88:4e:73:4c:6d:cb:b5:a4:26:da:80:0c:aa:
d2:52:4a:34:f2:34:79:f4:91:73:15:9f:55:e5:9f:
75:f6:b3:42:66:aa:89:d2:c0:26:ab:95:c3:41:ca:
51:8a:c5:1b:3d:57:d1:7c:f1:de:fc:0f:9e:11:12:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:62:7C:56:C5:97:91:41:63:11:D0:A9:1D:B8:DD:BA:B1:41:B0
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a2:6f:b6:60:d9:41:82:8e:4b:cc:f5:3e:fe:f9:4e:32:8c:
e6:35:06:65:3b:7d:1a:01:15:fd:51:f7:fb:53:3c:92:f3:1a:
f6:3a:1e:fc:f2:be:9d:bb:b5:86:f6:00:33:44:9e:2f:e7:77:
5b:9f:ac:3f:ec:12:a1:01:92:92:27:90:3d:42:50:cb:d8:bf:
a5:14:d1:11:d2:77:68:79:be:a8:0a:b2:d5:4b:f6:26:2a:e9:
16:33:91:5f:44:5c:92:91:c3:d2:59:7e:c8:2e:46:e2:6d:12:
49:71:51:62:9d:86:bb:47:b3:89:b5:a1:93:cd:e1:94:6f:4a:
d0:71:d3:2e:9f:0d:af:c6:4a:fc:53:64:66:b9:a6:8a:90:79:
c5:76:0e:b1:69:f1:ed:27:14:08:cf:8d:35:95:c7:50:c1:8b:
94:ff:12:38:11:70:e0:a6:ef:cc:fd:ee:52:dd:d0:51:81:4f:
47:c6:a3:04:f7:c4:09:64:62:e9:a9:6f:af:76:b3:17:25:28:
22:bf:ee:44:a1:fb:10:10:8f:82:19:62:dd:a6:c8:33:66:db:
ff:76:35:49:c7:fd:81:eb:c9:68:a8:7e:90:65:4b:ba:09:88:
50:cc:46:36:e9:68:93:c6:2e:cb:cf:52:95:e9:00:19:97:4d:
5c:dd:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:11 2025 by rpki-client