Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: AsIAyaTwkyQ+DUFFHp9hFOfD9CtxpsOmbsG+coQYqfA=
Subject key identifier: 84:DC:5E:6E:B9:FD:B2:D4:0C:A2:BB:76:A0:17:B2:31:61:82:68:81
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 0198D73B7376C1162CF94465C1CB062ADBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:54 +0000
Manifest this update: Sat 23 Aug 2025 14:00:54 +0000
Manifest next update: Sun 24 Aug 2025 14:00:54 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: xfD1DQoy4ZGS5bApbxiIcyYzXVvmyG/OdnfX5U/mocw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:73:76:c1:16:2c:f9:44:65:c1:cb:06:2a:db:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Aug 23 14:00:54 2025 GMT
Not After : Aug 24 14:00:54 2025 GMT
Subject: CN=84dc5e6eb9fdb2d40ca2bb76a017b23161826881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:4c:85:7b:cb:2e:f4:0b:c9:1f:2c:bd:35:
60:73:7b:12:bf:80:6c:58:61:9d:98:a2:2f:d8:0b:
fb:78:e6:ee:e9:cd:0d:26:80:fa:ee:be:5e:44:21:
8a:95:9e:54:0e:a3:cb:5f:86:ba:b0:d9:7f:ec:e8:
df:b1:42:22:cd:c5:94:60:77:a1:57:2f:8f:c6:b0:
ba:78:3b:e7:eb:f2:c3:f3:9b:e7:61:61:18:97:53:
2a:12:48:c3:ea:d3:43:ca:77:ab:70:13:9c:7a:63:
cd:36:3a:a2:69:99:0a:0b:50:a2:be:ad:08:93:df:
67:29:2d:00:67:3c:6b:39:ac:fd:54:fd:22:d7:48:
13:71:55:cf:7e:ff:78:3a:2e:bc:e0:2c:4d:53:e2:
ed:26:d1:8f:e2:de:e7:1c:59:ba:42:64:58:ca:05:
59:e5:ef:be:eb:6f:32:f9:c3:2b:14:40:bb:51:8f:
7d:c6:99:9c:4d:ad:ef:21:41:ea:d7:f4:4f:41:56:
96:45:40:c9:b3:ce:9f:7c:ca:f1:a3:fc:3a:1e:12:
71:82:eb:5a:78:60:b4:bf:59:59:ab:d5:bc:dd:30:
6b:40:0f:33:20:5f:3f:b0:36:be:6f:b0:29:7c:5b:
60:32:50:0c:fc:ea:3e:cc:ca:39:2e:3a:5a:dd:6a:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:5E:6E:B9:FD:B2:D4:0C:A2:BB:76:A0:17:B2:31:61:82:68:81
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f6:3e:1d:88:26:cb:e4:5b:aa:be:dc:05:c9:05:0a:2d:5b:
38:71:8b:cc:47:cb:c5:26:7c:d0:33:ec:f4:3d:be:51:d1:74:
65:70:4e:45:17:56:5b:33:10:2d:fe:a6:18:18:99:a4:f7:ad:
11:e1:e0:21:38:0b:f1:f9:0d:e6:89:c5:34:d4:4a:6a:41:3d:
35:14:df:6a:70:ea:f9:c1:0d:18:ef:18:a4:24:f2:f3:69:01:
4a:39:5d:48:1a:c8:2a:1f:75:12:f5:62:c0:5d:91:2f:b4:41:
cb:e9:83:76:38:2d:af:fa:54:78:8a:fa:7a:0d:88:6d:02:89:
73:c3:22:b2:8a:b1:a0:7a:c4:13:ec:84:0d:a7:37:71:0e:d5:
ab:5f:67:53:35:ec:e0:0b:7d:d8:f7:77:d6:ca:54:53:85:27:
b6:96:db:eb:77:9a:ed:19:ad:ab:5e:23:29:7e:0e:21:ba:ae:
13:a8:4c:28:d6:19:e2:5a:3f:74:f7:5e:78:d8:27:bc:55:90:
4e:a5:3c:d7:fe:ca:12:16:87:bb:b8:0a:2b:17:66:3c:e8:24:
b0:d6:f7:2d:49:94:8b:22:8b:f8:e6:87:72:b8:66:b9:fd:59:
47:33:73:1e:7e:05:f6:c4:7e:cf:45:0b:bc:82:1c:08:4c:45:
c6:b0:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:32 2025 by rpki-client