Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier: zY/HI0yuQSn9n80EV9cODpMJH+8dqYOykn13ra4V02w=
Subject key identifier: 3F:F4:24:5F:CC:8A:CF:88:17:EE:0E:57:13:3B:81:23:D3:0F:DF:9A
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0197B8907BFF1EE90D74CBF8421E8A833F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number: 1191
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=)
2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: BcXh4Hf6x5Ifw41dLoKAK4xUXwOOf3dC5KpadE5JWCg=)
3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=)
4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=)
5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7b:ff:1e:e9:0d:74:cb:f8:42:1e:8a:83:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=3ff4245fcc8acf8817ee0e57133b8123d30fdf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:80:e3:e1:4b:b4:8a:c1:9f:76:82:29:9a:
29:84:af:1f:21:c9:d6:8c:33:63:50:05:31:56:89:
ca:e4:c9:f6:45:30:73:0c:08:f4:b3:29:87:ac:27:
10:00:16:76:96:09:4c:e7:09:a8:8f:1e:00:90:c4:
91:1c:d9:ff:e1:c7:6c:34:78:38:a6:4a:85:29:cf:
96:e9:ef:0c:53:9d:2c:b5:bf:3f:f9:00:06:a0:f4:
08:28:1d:00:f4:db:ad:eb:4e:5e:22:b1:38:7e:63:
93:25:28:22:1b:62:bb:3a:b6:e1:d8:d2:c8:af:92:
3b:e2:a0:37:67:f5:10:89:a7:1f:3c:ab:60:a1:42:
ce:06:80:00:55:a6:a0:a9:b6:82:2b:24:bf:39:7a:
c9:21:6c:b2:0d:3f:92:fa:51:1b:27:1d:35:04:9c:
f2:e6:7c:ed:f8:14:08:b7:8e:8e:a8:f4:76:f5:ab:
46:7f:17:aa:9d:2b:74:53:50:eb:17:46:87:98:00:
79:2d:38:33:6a:51:d7:19:99:e7:bb:f5:5e:3d:5c:
f9:0b:77:d4:06:73:c8:a5:14:00:11:70:6b:55:39:
9e:9d:31:2e:40:4e:ae:6a:3f:41:f6:91:aa:98:4f:
0a:af:de:7f:d0:54:84:1b:1d:3b:ed:ed:9d:c9:79:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F4:24:5F:CC:8A:CF:88:17:EE:0E:57:13:3B:81:23:D3:0F:DF:9A
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:5b:e2:78:22:2d:d8:04:ee:96:d8:70:9e:28:e6:0e:8a:
cc:e5:72:e7:e3:dd:d9:73:53:ed:a3:3b:63:3d:90:69:8c:fe:
39:23:ae:24:52:91:7e:b0:ad:69:ea:4b:d1:56:8a:7f:f8:57:
70:41:3d:d3:bc:1a:72:fd:c5:85:aa:6e:5f:92:75:16:d8:83:
09:74:55:cd:6e:6c:d3:81:c6:fc:29:3a:37:d9:80:fb:e7:d0:
90:de:91:3c:16:4d:9a:de:f2:fa:4f:bb:d8:38:47:0d:33:4f:
a1:e4:30:21:91:57:33:8d:4f:ad:80:d0:35:61:2d:e0:67:f1:
0b:6b:32:bd:f6:b1:0b:05:8e:6a:b5:d0:64:30:fd:58:0c:b8:
60:f4:34:4f:2b:5b:45:c8:b6:28:0d:44:29:29:02:4e:37:db:
44:ea:51:e0:ce:42:4f:f8:9c:ec:31:74:b3:04:83:b5:41:ad:
37:fd:bf:d8:16:20:ca:98:08:25:ff:e6:0a:be:25:07:bc:aa:
e4:06:81:aa:01:61:8e:8e:ee:90:34:d1:8f:35:aa:ca:ba:28:
b1:7e:28:06:37:34:5e:e7:5e:6f:19:33:9f:2f:71:99:78:72:
84:b1:53:9b:58:42:d6:44:32:7b:29:29:33:c0:ed:24:e2:8e:
ee:0d:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:42 2025 by rpki-client