Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: roR4sadewKTOqIb2J/FhwfiHA4kYkOJO7BEOKOkkUSI=
Subject key identifier: C3:A1:D5:F9:75:8F:75:88:A9:35:DA:EE:1F:AA:E6:86:5C:36:F8:A6
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0198D58368A9AA98DAF01B3CEFAF14110351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 063B
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: qvM/kEmuKyIAAXf2TmxMm3zkevaMG9xyC4K67Y5aADY=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:a9:aa:98:da:f0:1b:3c:ef:af:14:11:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=c3a1d5f9758f7588a935daee1faae6865c36f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:7b:f9:7a:39:15:d8:c1:4f:05:c7:75:47:
cb:f0:36:ca:7f:0c:77:10:fd:ed:98:ce:4c:74:5b:
d1:23:c1:29:49:ee:4c:9e:47:f2:94:d3:8d:e9:48:
a0:4a:c0:9d:2d:3c:12:e1:29:4d:55:7a:e4:54:8c:
3e:9e:61:58:fe:47:65:a2:65:57:a4:00:67:57:b6:
98:b7:22:ef:3d:1c:3f:ba:91:52:e1:e2:b5:a6:b2:
78:3f:12:7d:28:f3:76:1f:4a:40:a2:03:13:8e:03:
34:1a:1d:32:60:bd:aa:6f:2d:4d:b9:04:df:47:45:
23:bd:1e:d5:13:9d:23:5f:18:65:27:21:6a:b1:16:
92:8f:fd:ce:14:c8:8c:8c:d9:09:7b:a6:ce:8b:38:
79:47:9d:08:d8:26:4f:a0:29:4d:fd:d8:d7:06:5b:
3e:41:d7:91:18:88:6b:8a:d6:50:67:7e:51:20:a1:
57:00:d2:45:7a:cd:84:a1:45:6f:c5:dc:6f:15:42:
9f:e8:02:92:56:89:d0:2d:7b:48:be:5a:a8:27:8d:
e5:08:2c:04:9f:fc:57:e7:de:50:ee:7a:5a:b1:c2:
76:a8:98:67:75:2c:34:d1:33:dc:76:82:3f:48:34:
78:04:2b:f3:58:f4:76:80:0f:d5:b3:2f:f6:36:f3:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:D5:F9:75:8F:75:88:A9:35:DA:EE:1F:AA:E6:86:5C:36:F8:A6
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:42:5e:d6:db:59:e9:93:25:a3:a8:47:e9:57:44:1d:68:
22:bc:b7:dd:fd:64:59:6c:f8:a1:2f:c5:a2:22:cc:60:5a:05:
21:da:ae:80:ca:e2:25:2f:9e:ab:7f:62:54:1d:2f:fa:d8:20:
0f:50:9c:08:cb:45:fe:2e:fd:55:3f:38:94:6d:bd:22:92:b0:
26:1b:72:cf:1b:a5:69:24:cb:ee:7a:9f:a5:fc:fd:e6:5a:19:
27:1f:6d:5c:0e:9b:4a:d8:4c:f8:3c:61:90:8e:77:70:a9:4f:
0b:d5:84:f7:4a:e4:60:d3:08:fd:02:60:b4:b7:2e:1d:a8:45:
a5:67:b6:b4:7c:17:66:b2:78:a8:b3:35:f2:47:79:f6:ef:3a:
1d:69:b6:e3:f7:ee:3d:f6:e9:1f:b4:67:dd:06:12:0a:c3:47:
05:e8:b2:17:32:6b:da:45:62:62:4a:c1:d9:2c:cd:fe:ff:e7:
ed:01:56:c9:b1:f0:a0:e6:b7:4b:46:2f:d4:64:1f:1a:7e:86:
c1:8b:f2:15:e4:bc:42:7e:6c:84:fd:6f:2e:d3:5f:f3:dd:a8:
8d:9a:88:d1:2a:76:da:6f:0d:f1:41:fe:fb:ea:a1:5e:fa:5b:
ec:8d:ba:42:43:e6:3c:ee:cd:4c:fd:91:60:27:ff:39:ae:c2:
1c:5e:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:16 2025 by rpki-client