Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: iwKNszPgvo7mY6EqbvAknDW4hh1eUnmh1eDnijB5Zn8=
Subject key identifier: D5:3D:C6:B3:C1:67:D2:AF:17:3C:E7:A7:2E:67:60:9A:0C:51:5E:7F
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 0197B6A1F9CEDD38C955F58645ECCC8514B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 0F46
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: XIdc9lvjEeIulKpCmFmEFSckgFLAMzuo4ruZPbmsQ1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f9:ce:dd:38:c9:55:f5:86:45:ec:cc:85:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=d53dc6b3c167d2af173ce7a72e67609a0c515e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:1b:ab:ab:ba:68:56:e4:22:15:d0:4b:b1:
69:64:e0:dc:53:8f:03:52:73:6b:b4:8c:93:21:07:
43:21:52:8a:4b:17:67:39:05:29:62:b3:aa:dd:a7:
cf:70:46:a4:84:36:12:79:cb:fb:17:8c:52:10:3c:
ba:07:ee:90:ce:75:8f:9d:33:b9:de:7a:8d:e3:60:
e9:12:af:bb:49:1d:d5:53:0b:5e:e5:40:f7:87:51:
45:43:e1:57:56:2c:9e:78:82:67:32:73:94:fe:70:
f7:dc:43:71:a1:66:f1:cd:df:57:41:32:6b:27:bf:
7c:e1:30:11:cc:59:28:a4:c8:8d:0f:0f:d4:55:c6:
61:1f:12:9b:d3:3c:00:7a:23:de:27:3d:a8:e8:01:
8a:12:23:e5:8f:5e:f0:11:d3:f7:e1:fe:77:45:c6:
4a:cb:a1:66:71:a4:c7:a0:00:12:85:0c:9f:1b:40:
72:08:fe:f5:d9:54:fa:3b:b6:5c:b1:8d:eb:f9:79:
e3:40:39:b3:4d:19:54:5b:98:4d:50:72:42:94:d0:
26:08:df:e8:3e:5b:ee:a0:9d:07:38:f0:3c:ce:a1:
ac:72:23:d6:59:29:4e:61:a3:0a:41:19:34:66:cc:
c6:7c:98:f6:66:1d:d8:5c:19:40:1c:c4:61:d1:20:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:C6:B3:C1:67:D2:AF:17:3C:E7:A7:2E:67:60:9A:0C:51:5E:7F
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:8d:31:98:53:fe:67:c9:a1:7a:26:0a:f8:e9:b9:a9:a2:
d9:82:3a:7d:16:59:ac:7b:33:c4:46:d0:1e:05:98:d7:8a:d1:
16:28:75:c0:88:2d:3b:b9:3a:92:4a:77:0c:92:94:d2:27:99:
61:fb:b6:ae:3e:3a:b1:7e:74:56:38:c7:f4:a2:56:3b:c6:ff:
ee:8e:13:fd:8b:54:7b:84:4f:4a:a2:0a:c5:41:23:dd:59:db:
7e:11:3b:82:3e:eb:d0:cb:ba:b6:50:4a:5e:12:d2:68:e2:1a:
6e:4f:cb:04:e6:51:ee:c9:77:49:06:d8:ff:fe:46:20:1f:52:
17:ef:23:8e:92:eb:b9:8c:95:6d:37:4a:e7:73:8b:c5:4c:b6:
7a:de:98:95:64:11:24:f5:5c:36:fc:5e:ee:e4:a9:90:7f:80:
2f:13:d4:c6:33:07:91:21:a7:50:00:7f:90:51:34:7f:91:56:
2a:6f:b2:9c:6d:86:a6:e4:e1:cc:83:47:30:88:8b:b4:34:39:
11:1f:15:1b:0f:35:a6:4c:20:11:24:6a:e0:20:cb:9e:cd:c3:
7a:5e:94:f1:74:f9:01:78:03:54:7e:91:1f:5d:e2:f2:6e:69:
b1:5c:01:1a:9d:e3:4c:59:05:96:11:cf:38:3c:b4:26:06:a0:
5f:5c:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:57 2025 by rpki-client