Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: jjxENkCLuhQXtMjPiYq2kOLfKyWhKWkRsYtbfNeGz9g=
Subject key identifier: 13:72:A1:B2:DD:89:D5:2D:1E:17:B4:C4:C0:C1:EB:B0:BA:8B:54:AA
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 0198D4A7E4D92E95E288AD247FC94BC74B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 03C0
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: kxZiPTiWhzr1AFmZntc/i2bwR89uEzykYcrlb3to6i0=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e4:d9:2e:95:e2:88:ad:24:7f:c9:4b:c7:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=1372a1b2dd89d52d1e17b4c4c0c1ebb0ba8b54aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:65:71:d1:f9:26:34:c2:c5:4d:e4:e1:f8:
b9:aa:1b:ff:e5:23:dd:2d:45:30:0a:6a:77:e8:e6:
98:8c:5c:71:19:78:1a:10:4c:bc:38:cc:20:ea:c9:
c7:11:9e:96:d0:fe:11:77:08:b4:b4:0d:1d:ff:82:
c4:ef:04:2d:8c:8b:cb:9f:ee:b7:b6:de:8b:9f:7e:
fb:09:7f:bc:88:2e:af:b4:85:28:70:85:6f:82:8e:
f5:43:e4:e8:66:a5:64:f4:bf:d2:db:ba:fa:05:33:
52:76:17:d3:f6:07:7f:26:76:72:d9:a4:24:b5:e2:
a3:33:53:32:ab:04:09:f4:15:51:74:65:be:39:83:
0e:6b:eb:59:0d:2b:ae:c2:13:a5:78:fd:98:85:d6:
c6:2f:b8:40:13:6e:f2:aa:5c:e5:47:11:ae:39:2c:
6c:77:25:34:9e:ac:b4:79:5d:fa:ae:f9:c4:ad:9b:
5d:4a:bb:dc:7e:21:52:44:ce:ac:e3:3d:c2:77:24:
31:af:03:88:5e:e9:3a:45:95:b1:f0:6d:2a:0a:72:
98:8d:ed:bb:00:21:00:8c:4c:18:43:1d:aa:42:99:
c6:a0:b2:50:41:e5:84:bd:87:99:79:6d:0d:b6:04:
a3:74:da:8a:44:1a:c7:73:3b:69:a5:6b:b0:cd:74:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:A1:B2:DD:89:D5:2D:1E:17:B4:C4:C0:C1:EB:B0:BA:8B:54:AA
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c1:d8:d3:2b:f2:e2:46:8f:9d:ec:76:01:b4:fe:32:3c:59:
6d:0b:47:21:3c:c8:cc:b7:32:a9:a8:d6:1c:b4:15:b1:84:2e:
4e:68:01:85:3a:62:04:ce:5c:de:57:ef:1d:3d:ae:49:f0:80:
e2:ae:58:d4:dd:af:9e:b5:30:a9:d1:d3:9a:53:a7:39:99:64:
e7:dd:ce:b4:e2:c2:fb:72:80:ec:d4:d3:d4:64:aa:e3:6a:04:
74:45:9a:bc:53:e6:8f:c5:d3:e1:4d:fb:61:f5:6b:c1:b7:fe:
31:8c:52:7a:1b:cb:80:1b:f6:ed:55:4e:90:1e:43:bf:2f:93:
84:d8:67:ce:01:4a:ec:0a:6d:89:59:7c:b0:c9:77:a5:76:5c:
35:64:00:58:5a:04:eb:ed:c9:c6:64:59:fa:41:25:f3:32:16:
f9:a8:2e:6d:5b:95:dd:33:12:10:ce:06:8a:e7:64:62:b1:9c:
03:be:79:68:d1:43:3b:4a:fb:9d:02:be:10:cc:15:02:30:44:
86:6d:9f:7f:a4:bf:d4:f9:73:62:85:69:a4:e7:a5:74:f2:45:
bb:a8:3c:f1:ad:6a:98:36:68:ef:a3:d9:95:72:45:36:95:07:
d7:a3:22:e5:29:71:2a:31:89:65:8a:19:8f:78:3f:85:4e:e3:
ec:1e:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:37 2025 by rpki-client