Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: jwnrktXgxHdZyXku0ykMvrOBUCPtW7h4TgfDC9YDfxw=
Subject key identifier: 34:82:97:6A:96:EE:71:F9:60:CA:AE:27:D5:0B:54:93:26:B0:AD:4A
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0199FC8F5BED6D497288EFD24BF797FB4076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0CAA
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: /grPDy9c3h+H6MdNhRhwQqt3T0C/GtIEpA15sJ+91Ro=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5b:ed:6d:49:72:88:ef:d2:4b:f7:97:fb:40:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=3482976a96ee71f960caae27d50b549326b0ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:b3:b8:2b:17:c7:88:09:fe:73:84:73:73:
d6:32:65:f8:5b:b9:e0:00:30:88:f9:a2:ad:3b:ef:
6d:8d:95:62:03:25:b9:28:fc:8b:c1:8e:4c:ad:43:
c2:60:f3:87:b4:45:a0:7b:02:f2:28:e5:5a:bd:0a:
5f:5c:f8:ba:c3:d0:5f:cc:76:94:69:01:42:00:b4:
68:a6:88:28:14:58:6b:40:73:e8:25:ee:5e:16:93:
b9:df:92:b6:74:44:f4:40:cf:4e:f2:ab:b8:d8:23:
bd:6d:4d:fe:81:ce:2a:71:98:ba:4e:4b:0b:48:67:
ab:5a:2c:72:f8:f1:8f:2b:44:2e:56:07:ce:cc:fd:
73:0a:80:ea:bf:fb:3d:a2:d4:d0:31:84:1a:f7:a8:
67:a3:63:70:d1:91:20:21:9e:15:c8:d2:2f:40:16:
6c:e3:ad:ab:e6:a6:6d:f2:d3:be:0f:d1:4a:44:2e:
66:3d:9a:13:4c:3d:be:cd:ca:83:3c:8a:ae:1d:96:
15:0f:e5:73:00:9a:89:6e:42:d6:d0:f7:01:22:e8:
b8:ff:67:bd:34:3b:e4:ed:d9:ad:3e:9a:1c:ee:96:
e4:d6:fd:56:60:a5:03:01:78:4d:e5:d3:c3:1a:1f:
ae:5c:9f:ba:01:28:b7:56:58:bf:f2:6e:f9:2a:1e:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:97:6A:96:EE:71:F9:60:CA:AE:27:D5:0B:54:93:26:B0:AD:4A
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:ff:02:97:39:73:62:6d:6a:43:81:1b:cc:81:e9:0e:15:
f3:b2:59:c1:9c:f3:3f:de:07:ed:84:6b:74:b2:07:2c:26:34:
5d:4b:ae:dc:28:b6:93:60:43:f7:ca:2d:80:f1:57:b7:8e:2f:
31:3f:a4:65:62:a8:08:ba:ca:67:d6:68:48:ed:47:12:6b:32:
60:34:06:db:19:4d:97:ec:31:ac:48:6f:a5:98:ec:d0:16:38:
53:0b:33:5a:a0:ee:77:91:78:c6:8b:43:62:74:4f:e5:e9:7c:
cc:44:cf:64:01:cb:d3:29:6b:1d:b1:9c:78:29:34:78:9b:40:
8b:4f:d7:30:f6:39:31:9f:13:61:9e:c2:15:22:32:33:9a:4a:
57:82:46:0b:d0:c4:35:67:50:f8:a6:ca:2a:88:b8:36:04:99:
25:85:d0:34:84:20:5d:57:e0:10:3b:ac:74:f1:a1:fc:61:77:
92:03:bc:a8:d4:16:03:ef:c1:db:a0:b9:2e:a5:c2:cc:d1:67:
c8:59:64:b2:a4:50:93:67:58:57:dc:7a:bc:4b:60:f8:08:d0:
ee:81:76:89:0b:e2:ef:77:50:e8:31:26:fd:3b:07:42:c2:e1:
f8:0d:cf:0f:d0:29:1d:06:e0:da:0a:b1:d6:c3:23:ee:a2:18:
c8:fe:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:54 2025 by rpki-client