Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: AgzMoB5Xze9tBvRBfjELiQW4WHb8Hf0S7e+q75HB6ho=
Subject key identifier: 98:D9:2D:52:B7:F5:0C:FC:C2:80:B0:AF:DD:DA:22:DE:CA:FD:75:D8
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0198D515C30FDB1CB679230BA5939EBBE2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0C11
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: bcooXkJ//ep+IPAbyPoAUmd6tDfUYcqLtpXccMnqv4I=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c3:0f:db:1c:b6:79:23:0b:a5:93:9e:bb:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=98d92d52b7f50cfcc280b0afddda22decafd75d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:5d:23:83:a4:ec:6f:36:19:9f:4c:c0:8d:
8e:aa:29:40:da:93:78:6c:d1:8c:fd:79:80:0b:64:
7a:ac:44:e2:ce:2d:5f:9f:46:91:6a:35:3e:b7:a9:
5e:d3:fc:cd:5c:43:2d:25:85:d5:64:0e:42:f1:fa:
01:d0:ab:b1:e5:d5:4d:d7:49:b5:74:4b:b3:e1:a2:
e5:4c:5b:23:da:24:22:d9:97:29:ad:06:03:b3:57:
0b:4b:86:51:9a:fe:0e:c3:82:b6:ed:ef:55:c6:ac:
fd:f7:c0:d1:ba:ee:02:d0:cd:6c:09:c2:bc:0b:8a:
99:d7:76:d0:ab:8b:a3:12:23:76:32:2c:2b:41:7c:
d7:64:35:96:e2:17:73:21:b7:52:a8:33:8c:d8:73:
9a:95:fe:63:55:56:45:c0:f2:f1:32:71:5a:fb:46:
a6:8d:eb:53:af:c3:1f:f7:c4:84:32:69:90:32:29:
34:dd:fc:b5:3d:87:1a:9a:c5:0e:73:b4:02:96:05:
a3:18:e4:e6:ff:e3:f8:2b:2d:57:2d:4a:61:28:bf:
93:62:70:c5:e6:0b:30:27:11:89:9d:5d:76:27:11:
cf:8e:49:26:a1:9d:9b:f1:04:81:38:12:d4:d1:bf:
de:21:6c:64:f9:d0:3e:cc:b2:8b:19:91:7f:04:48:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:2D:52:B7:F5:0C:FC:C2:80:B0:AF:DD:DA:22:DE:CA:FD:75:D8
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:34:ce:19:78:41:d7:34:50:55:a4:a0:1b:5f:66:f2:22:c6:
16:ac:b9:b0:70:45:53:c2:53:0d:4a:32:ff:27:95:1e:62:34:
dd:39:22:90:45:47:38:15:ed:34:3d:67:66:30:bc:5c:fc:69:
fa:4d:4e:95:ff:d2:8a:cf:03:1c:ed:e2:d2:5c:cf:b0:39:54:
25:8e:b2:d6:99:91:46:c1:5d:7a:8e:c6:a7:40:b8:d9:30:10:
ef:ef:1b:75:0f:b7:b9:d8:9d:17:6f:14:41:30:fa:5b:92:41:
2e:0c:99:ab:7c:e3:26:c1:5a:52:f9:a2:27:71:a9:74:6f:7a:
a3:68:ab:cd:49:3d:78:86:21:eb:cb:3b:01:31:ee:e3:f4:53:
29:1b:86:13:7e:60:94:0a:dd:8f:85:46:6f:20:56:96:f1:67:
44:d9:ba:e9:e2:fc:43:dd:3e:fc:92:a9:1b:ab:14:7c:03:ff:
c6:53:3b:52:1f:23:7f:71:18:24:3e:ee:08:97:20:2c:64:ec:
77:7b:92:1a:99:eb:8b:92:ff:ea:55:3b:d4:86:b9:18:6f:ec:
87:c3:4b:5b:3f:76:f1:74:b6:ae:ef:17:1d:b9:04:b9:5e:d0:
95:dd:e5:07:b8:6a:92:42:f9:8d:c5:a3:83:1d:a2:d1:87:09:
57:02:6a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcMP2xy2eSMLpZOeu+LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh
M2E1ZjgwHhcNMjUwODIzMDQwMDI5WhcNMjUwODI0MDQwMDI5WjAzMTEwLwYDVQQD
Eyg5OGQ5MmQ1MmI3ZjUwY2ZjYzI4MGIwYWZkZGRhMjJkZWNhZmQ3NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYpdI4Ok7G82GZ9MwI2OqilA2pN4
bNGM/XmAC2R6rETizi1fn0aRajU+t6le0/zNXEMtJYXVZA5C8foB0Kux5dVN10m1
dEuz4aLlTFsj2iQi2ZcprQYDs1cLS4ZRmv4Ow4K27e9Vxqz998DRuu4C0M1sCcK8
C4qZ13bQq4ujEiN2MiwrQXzXZDWW4hdzIbdSqDOM2HOalf5jVVZFwPLxMnFa+0am
jetTr8Mf98SEMmmQMik03fy1PYcamsUOc7QClgWjGOTm/+P4Ky1XLUphKL+TYnDF
5gswJxGJnV12JxHPjkkmoZ2b8QSBOBLU0b/eIWxk+dA+zLKLGZF/BEiDbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjZLVK39Qz8woCwr93aIt7K/XXYMB8GA1UdIwQY
MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt
NzYzNzc5M2Y4ZjNlLzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl
LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjTOGXhB
1zRQVaSgG19m8iLGFqy5sHBFU8JTDUoy/yeVHmI03TkikEVHOBXtND1nZjC8XPxp
+k1Olf/Sis8DHO3i0lzPsDlUJY6y1pmRRsFdeo7Gp0C42TAQ7+8bdQ+3udidF28U
QTD6W5JBLgyZq3zjJsFaUvmiJ3GpdG96o2irzUk9eIYh68s7ATHu4/RTKRuGE35g
lArdj4VGbyBWlvFnRNm66eL8Q90+/JKpG6sUfAP/xlM7Uh8jf3EYJD7uCJcgLGTs
d3uSGpnri5L/6lU71Ia5GG/sh8NLWz928XS2ru8XHbkEuV7Qld3lB7hqkkL5jcWj
gx2i0YcJVwJqZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:19 2025 by rpki-client