Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: vHI1fuswAG2cNJOJV6woFBjNO6vLi2A9P/k6hcLknPk=
Subject key identifier: DE:2A:59:C5:6F:01:A4:7C:D8:BC:BD:9F:5A:80:E4:06:AE:29:92:86
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0197B745A3CEB8E12679E9A076146293E8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0B7D
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: sxRzDSKq6COyPNFuSliWy1y8TYd3V+gkiiC9EEAg2OQ=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a3:ce:b8:e1:26:79:e9:a0:76:14:62:93:e8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=de2a59c56f01a47cd8bcbd9f5a80e406ae299286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:30:27:0b:b9:30:c0:d8:33:18:fc:00:fe:
68:f8:7d:ad:2e:ac:c6:5e:c7:75:ab:c8:22:e4:07:
8b:c2:c1:d3:87:2f:a1:3a:db:c1:0c:51:4e:e2:bf:
d7:2d:ad:f0:7d:34:df:aa:d4:f2:7a:60:3a:88:d9:
27:d5:b8:3b:ea:bf:6e:ff:86:8b:9b:eb:18:a3:7a:
6e:9a:c1:2a:e5:18:7f:b6:3b:87:ad:6f:23:c9:4f:
72:47:d2:ca:dd:05:e3:1c:88:db:19:25:8d:eb:23:
f0:da:81:e8:d4:65:c5:9f:ba:5a:ea:25:3f:9f:4c:
3a:0f:9d:10:04:3d:ed:18:63:73:10:f1:c5:b9:2b:
5f:43:cb:eb:45:87:f1:f2:ec:4f:07:7c:92:f9:fb:
65:2f:2b:1e:eb:de:11:a7:49:5e:37:9c:59:0c:c7:
df:be:54:fe:65:76:d9:a0:ea:69:6d:58:c3:6d:75:
71:b3:26:ea:cf:d1:4b:70:d3:57:45:f0:c8:75:17:
ca:44:1a:8a:1c:17:09:96:bc:2f:b2:9c:09:58:b2:
04:aa:eb:e1:f6:d1:28:84:15:73:fa:51:2a:8b:f1:
ac:3c:91:2b:1c:a0:de:e0:f5:f9:77:49:a3:ab:f9:
5c:af:5b:bf:1f:a8:5d:ae:23:3f:6d:26:d4:13:39:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2A:59:C5:6F:01:A4:7C:D8:BC:BD:9F:5A:80:E4:06:AE:29:92:86
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:5b:48:b8:f7:cc:14:18:d1:60:38:2f:e1:fc:9d:bc:13:
b1:a8:ca:0a:69:34:91:bc:fe:c8:1b:8a:dd:ce:10:fa:c0:20:
d6:5f:c3:43:98:91:e3:00:bb:68:9e:d7:02:c6:e3:1b:eb:89:
ea:2b:79:c8:26:5e:61:f8:18:78:65:d5:89:cc:27:97:86:4e:
13:d9:cb:17:5a:63:4a:3e:8a:76:dd:a4:97:32:0b:65:ea:21:
95:69:c2:ce:2d:81:34:58:68:5b:62:da:b5:f3:6a:e9:a6:51:
d5:66:f5:a8:14:c4:16:92:b6:bd:94:6f:01:8c:c6:5b:0f:26:
d2:ef:a9:cf:54:9a:ac:aa:86:49:76:a8:2c:2e:d8:a3:e4:38:
97:9f:43:53:1f:cd:86:22:b6:3e:2e:05:7c:87:87:d3:b6:ed:
67:72:2b:5d:04:95:4a:2e:9e:c1:63:68:b9:e0:3b:48:73:10:
ec:bd:b0:cb:6a:1a:7a:a5:b5:5c:0c:73:00:71:23:ad:67:54:
8f:43:00:a1:b8:38:97:1f:65:e4:77:3f:e3:45:47:16:ba:87:
d2:c2:41:01:43:bf:57:ab:cf:c5:5a:12:ba:56:c2:4a:45:0b:
f3:fe:8b:81:04:17:45:64:b0:6e:15:73:10:c3:1a:fc:12:70:
58:43:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:09 2025 by rpki-client