Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: ZKarSfPYqWV92KD/0XfFDSmYt1zBbe5akwA1L6Tk/7I=
Subject key identifier: CE:AE:32:9F:87:F7:AC:6B:BD:2E:A3:9A:24:BA:23:82:B9:27:29:4D
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 0198D4DFE9B1F3A17FC1E6A108E512F18377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 2cR6foxNYhkkew4F0thTRWlpjRiDhwRW9R4psXXawI8=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e9:b1:f3:a1:7f:c1:e6:a1:08:e5:12:f1:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=ceae329f87f7ac6bbd2ea39a24ba2382b927294d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:8e:51:5b:ce:b0:f5:56:de:ca:a2:96:37:
17:fd:8a:3a:7c:64:35:63:d4:e8:cf:32:b6:ea:b3:
32:34:fe:49:4a:d3:85:4e:15:ee:25:f8:eb:41:88:
5b:35:4f:06:be:8e:c4:75:e1:bd:c2:9d:57:67:dc:
8d:cc:1b:b9:71:c4:73:36:ae:b1:11:e2:8f:68:01:
e7:be:be:5d:99:97:45:15:97:11:05:2f:5d:b2:03:
47:d6:b0:fb:e9:97:b3:96:43:14:91:b0:81:0f:c3:
28:3a:47:1b:67:12:af:ac:99:f5:ca:10:ef:64:04:
ec:70:ed:63:e0:c9:1d:ef:ca:d6:bc:6c:d2:24:79:
4f:35:08:3a:90:09:a6:97:c5:64:d6:fc:e3:bd:29:
3a:6b:20:61:c0:fc:b1:70:a1:b5:76:54:bb:01:09:
de:cb:27:08:ca:10:85:07:64:06:5d:aa:7f:26:56:
53:ba:ce:a1:23:56:d7:8c:f0:ac:32:ba:62:27:40:
bf:f8:63:62:16:97:ea:da:e6:3b:e3:bd:ba:cc:96:
f2:38:7a:f2:b7:68:1e:b9:fe:3f:78:38:18:27:7a:
7a:e6:6b:c5:44:39:b2:3c:50:fb:ed:ea:a5:b9:07:
b2:18:73:9e:7e:6a:2c:3d:e3:26:50:3e:df:d5:99:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:32:9F:87:F7:AC:6B:BD:2E:A3:9A:24:BA:23:82:B9:27:29:4D
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:81:3d:43:52:48:ff:79:46:ac:58:46:cf:79:64:c3:7b:00:
72:44:78:b0:d6:00:64:9c:c6:51:5d:c7:17:f5:31:92:0f:eb:
07:4d:ea:47:d3:a9:be:7a:f0:60:80:d7:2e:e8:31:05:25:1c:
5b:4d:21:3b:d1:95:0d:aa:20:78:e2:8d:ea:e0:e4:89:56:66:
db:8e:c2:f3:e8:d1:4d:41:ec:6b:2e:b0:88:d0:77:14:b1:9e:
67:42:10:98:d7:ed:c4:08:be:fe:a8:bd:e9:fa:70:3c:45:45:
07:e2:07:cd:12:93:43:bd:0e:68:67:de:a2:57:51:46:d8:c0:
f0:60:4e:57:f4:67:8b:dd:3a:a3:dd:1a:79:08:7a:85:fb:8f:
ab:20:10:82:d2:76:13:dc:ca:4a:24:b3:a4:10:dc:cd:6a:5f:
72:da:b9:bc:5b:db:03:79:92:fb:09:1c:9e:2e:69:c7:0a:70:
e5:2c:fc:ac:73:7d:b6:2e:55:64:69:f0:c0:d4:68:38:44:b7:
9c:54:7c:04:8b:43:fe:70:80:fe:01:60:52:18:dd:5f:2e:c2:
27:b7:a2:36:39:d7:a2:83:77:0b:4a:91:a4:1f:37:03:b6:90:
1a:d3:e8:4b:4c:4b:80:71:6a:14:d9:67:d4:09:2d:60:a7:27:
43:a2:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:48 2025 by rpki-client