Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: tmdAEXHrOYI8Y38dAvggPzSaqXdUhvSP4Ceyz6nfos4=
Subject key identifier: 03:02:23:89:BC:18:21:D3:BE:A9:15:52:E9:27:2F:9C:21:20:C1:0B
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 0197C493BA742CBE6C7B80F16DCAD47BDAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0BD8
Signing time: Tue 01 Jul 2025 06:01:44 +0000
Manifest this update: Tue 01 Jul 2025 06:01:44 +0000
Manifest next update: Wed 02 Jul 2025 06:01:44 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: QY/9dbz/l7e7nINKmMVBzSjcaTB3wKSwwlfU5FCJREo=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:ba:74:2c:be:6c:7b:80:f1:6d:ca:d4:7b:da:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Jul 1 06:01:44 2025 GMT
Not After : Jul 2 06:01:44 2025 GMT
Subject: CN=03022389bc1821d3bea91552e9272f9c2120c10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:f3:d9:e8:e8:bf:33:4a:ad:ee:0e:82:0e:
a3:be:8c:60:4a:05:9e:e1:8b:df:ca:f6:23:e5:ce:
fd:15:e6:d1:a2:5b:9a:21:38:83:4a:a5:c2:c9:c1:
a9:d9:c3:73:bb:55:51:a4:56:13:67:0c:b9:4e:8a:
dd:53:f4:62:d6:6c:08:ec:18:45:df:9c:ce:2d:e0:
ff:4c:57:9a:3e:74:d5:de:b3:03:9d:66:5f:f2:91:
e5:3d:bb:b2:1a:9b:9b:b8:cc:a1:d1:1b:26:9b:b5:
2d:24:dd:e0:9c:e4:05:70:af:0d:52:a3:b3:08:bb:
79:e6:59:84:85:f6:46:ca:22:ba:4a:6b:05:5c:71:
1f:97:de:6a:39:1d:46:0f:ed:54:1c:c2:da:89:3e:
61:53:a9:31:50:33:bf:3a:51:8d:35:25:67:b7:01:
7b:96:29:d6:1c:31:ee:31:3e:03:33:3f:5f:fe:06:
13:4b:d5:58:1c:92:43:29:bf:70:8a:70:64:15:54:
ae:de:fb:36:c2:d6:7f:41:e3:27:ec:81:cf:e7:09:
d0:b7:97:3d:68:ec:50:c3:3f:c8:2e:ef:98:e0:38:
30:b2:3b:5c:2d:e7:01:86:09:c7:a7:e1:97:99:c8:
5f:a7:39:fc:47:96:f1:dc:a7:28:18:5a:fa:9b:ad:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:23:89:BC:18:21:D3:BE:A9:15:52:E9:27:2F:9C:21:20:C1:0B
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:6f:d6:32:24:41:48:fe:a7:6f:c8:31:54:86:94:21:65:
fb:8b:89:e7:4b:83:18:aa:f6:b1:0e:65:87:23:5c:ce:9e:b3:
df:1e:b3:f8:7f:3d:9f:0d:8f:a6:9a:22:75:94:48:7c:df:17:
b0:91:4c:28:2b:ad:5a:f7:db:19:26:90:9d:c3:ca:8b:b9:86:
f2:13:a8:ae:b0:04:7e:11:13:f9:97:5e:0c:4e:ab:eb:91:a2:
7f:35:96:73:09:75:8a:b4:af:4a:bf:2a:59:a3:09:8b:8c:52:
68:8d:ae:88:8a:33:b4:18:bf:3e:32:8f:71:a7:c3:eb:b7:19:
ea:30:a7:60:04:9f:93:a3:c1:52:89:5d:e8:4a:49:f8:29:1c:
e3:37:51:61:77:46:36:95:fc:af:3a:32:cb:29:f7:3a:6d:14:
98:e3:03:ee:58:4a:e2:a5:92:6f:fb:df:9f:34:fb:2a:c3:6a:
5b:5c:87:01:89:87:06:21:fb:c1:e9:b4:aa:84:6f:b9:c2:46:
9f:44:a9:05:a4:3f:a6:3c:b6:f6:80:3e:af:62:ce:ae:38:e8:
ee:ec:85:3e:37:76:e0:6e:ed:7d:bd:d7:c1:b9:a9:84:09:b3:
a5:bc:d6:5c:41:9e:86:77:a6:95:94:b2:9d:ca:3b:b4:34:69:
91:bc:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:04 2025 by rpki-client