Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: plRmO9VDEKoKwcWlzCz2qrwre31iGe3cWJm2aNI71bo=
Subject key identifier: 7D:5B:4C:7C:96:6C:13:C9:DF:CA:5E:4A:E1:0A:F2:31:4E:1F:F6:EA
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 0197C75CF1EAD75A575818A5C4A1B1A636AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 0F66
Signing time: Tue 01 Jul 2025 19:00:46 +0000
Manifest this update: Tue 01 Jul 2025 19:00:46 +0000
Manifest next update: Wed 02 Jul 2025 19:00:46 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: 5SbDVomqb29KjE8JoJfYP4anjE2sbOX4IPeeLWFzJiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5c:f1:ea:d7:5a:57:58:18:a5:c4:a1:b1:a6:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jul 1 19:00:46 2025 GMT
Not After : Jul 2 19:00:46 2025 GMT
Subject: CN=7d5b4c7c966c13c9dfca5e4ae10af2314e1ff6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:20:ba:85:86:26:9d:4c:da:04:60:59:68:
25:ab:7c:34:0e:27:0d:19:79:74:9a:ae:d7:ea:49:
82:9f:58:f5:31:cc:52:e2:94:2c:d3:83:7a:50:63:
23:ea:d0:47:02:c1:89:ba:d5:c9:aa:fb:bb:09:2e:
5b:a7:d6:0c:71:2f:22:5b:23:30:90:d9:3b:0a:78:
94:ee:5e:9b:dd:6e:80:97:78:04:78:9b:62:f4:7a:
b3:86:3b:af:98:a0:ab:18:3d:e9:21:8b:25:d2:b9:
cf:3d:fb:ab:87:58:92:06:9b:3e:1e:da:80:3f:0f:
2a:d8:c6:4d:fc:d7:31:46:7a:f5:4c:21:df:6f:eb:
66:7c:bd:c2:2e:c7:da:bb:12:e5:82:f3:90:a8:5f:
79:3d:c6:3c:9a:f5:03:38:a6:46:34:f8:bf:74:36:
70:b6:7b:c6:21:28:0f:75:d2:4b:d7:83:a1:1b:5b:
ba:ca:8a:68:b4:86:e7:32:ed:95:1d:f7:ed:09:45:
92:14:e9:ca:ad:1e:a7:61:8f:ac:ce:9a:30:56:bd:
5f:41:89:e7:71:61:ce:96:23:c8:41:b8:18:86:2c:
3d:b5:f1:09:cd:3d:16:17:71:cc:bb:6d:50:f5:58:
41:96:04:28:4d:4d:8a:df:26:9e:3e:ff:7b:0a:78:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5B:4C:7C:96:6C:13:C9:DF:CA:5E:4A:E1:0A:F2:31:4E:1F:F6:EA
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9f:1d:45:08:17:f6:50:b3:2e:18:92:f2:8c:76:2a:9a:87:
f2:05:63:de:c3:14:ec:ea:0c:4d:81:b3:d9:cd:cd:e3:c5:23:
24:f7:c6:03:af:99:d7:ed:4a:1b:bc:27:33:2d:c4:97:03:16:
94:89:e2:43:e7:a7:83:d2:11:60:02:4e:5b:0a:14:e2:af:49:
30:ed:a8:5a:2a:b1:a8:d9:db:88:73:78:6f:07:3c:b2:82:b6:
a9:da:a0:ff:aa:97:01:64:49:38:47:ea:ab:81:d8:90:ce:c4:
93:9e:21:eb:49:44:ae:3f:54:e1:01:07:0f:04:0c:72:2e:32:
3e:eb:d1:11:b2:97:de:c2:2d:85:ca:72:f4:27:1e:15:08:9c:
ea:0a:fd:21:76:de:ef:d5:86:d4:c0:6c:ac:30:39:08:6d:9d:
3d:10:01:a3:b2:ae:96:5f:0e:38:f7:84:b3:da:73:e8:b4:af:
1a:64:41:60:a7:25:31:cb:cc:95:db:35:84:83:f2:67:e1:5f:
05:ad:8d:d4:4d:83:e6:4b:60:30:1b:93:95:ca:92:7b:18:a8:
4a:ae:83:4c:20:b0:d0:8d:0e:0a:eb:c5:3a:33:a5:4d:8f:83:
fd:fc:c3:13:ec:bf:c7:77:6e:9d:92:d8:05:c7:fb:01:a3:40:
0b:d5:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:51:33 2025 by rpki-client