Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: /eJY2LqdHfTcHBbU26SFg3bOTg9KWLBYYgvL+fxca4I=
Subject key identifier: B7:2D:44:37:A8:92:C5:42:1E:71:F2:C3:7D:81:02:DA:48:0B:E8:06
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0198D69882B86E49B1FA5C7FB8EF48F0D469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: YGyI887swZTX0wbAxMz+JJBlzeUnxjXgYsq88ikJJKs=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:82:b8:6e:49:b1:fa:5c:7f:b8:ef:48:f0:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=b72d4437a892c5421e71f2c37d8102da480be806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:f8:b4:d9:e2:38:09:06:fe:1e:33:6e:23:
a1:1b:34:34:a8:95:d9:6a:7a:d4:fe:9e:02:32:6f:
de:86:4d:22:84:45:1d:56:ae:8e:e4:c0:12:d0:b6:
bd:ae:f5:9f:d2:87:3f:ce:28:ad:b8:ac:42:d2:0c:
40:88:13:70:b3:00:fb:68:0b:7a:a4:9c:d0:3b:e4:
be:c6:2e:10:5f:fd:c1:98:fa:33:3c:0a:b0:a0:cc:
e9:4d:4e:60:c6:1c:ad:7d:f9:6a:0a:86:de:30:9c:
ad:71:2b:25:3c:43:6b:5e:2b:13:b3:6b:dc:7c:da:
89:d2:8f:a5:fd:a6:0c:7b:23:a3:c6:71:27:0e:6c:
46:72:2f:5a:25:37:18:23:04:89:50:12:ac:f5:16:
69:7e:b3:d7:b2:9d:3e:79:53:6c:48:1b:76:d7:a4:
14:46:6f:5b:56:82:d9:d7:7b:27:12:da:df:08:dd:
20:f4:5d:98:da:6f:8c:3a:e3:8f:9a:e6:8b:82:e7:
2c:87:fb:99:18:cf:f8:b3:f9:07:d4:14:2e:a3:3d:
c9:22:cf:67:e3:60:aa:23:6b:b3:09:86:cd:35:7d:
2d:c5:92:da:48:90:55:8b:35:b8:9b:a2:f3:02:2b:
25:33:73:ad:c6:2b:a7:0a:58:3f:e9:df:ad:a3:85:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:44:37:A8:92:C5:42:1E:71:F2:C3:7D:81:02:DA:48:0B:E8:06
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:52:dc:18:47:d6:08:ec:3e:e2:95:c4:a4:5a:c3:13:80:b6:
7a:b7:80:0a:2c:d0:f4:5c:14:e9:b7:96:6d:27:28:ff:15:74:
c1:0d:40:fa:eb:77:d3:92:6e:c3:cd:3e:17:23:5d:3b:b2:76:
0a:aa:6e:1c:5d:a0:5f:f7:72:7f:93:78:5e:8e:d5:fc:b0:b0:
ae:17:89:1f:47:7a:5e:c7:8d:4a:3d:71:0b:c4:a2:eb:76:75:
3d:12:21:ae:88:ca:2d:d3:74:70:7c:d4:27:74:d8:83:47:f0:
47:62:ba:57:80:f6:6b:d2:de:21:32:37:b4:2d:ea:ed:d9:9f:
80:fa:81:e7:2d:1a:b2:8c:3d:c4:4d:10:be:99:b8:b1:3b:7c:
43:22:0a:65:5b:b0:4f:fb:0b:34:20:93:d7:aa:77:ec:84:4a:
99:2f:56:f5:a0:92:97:2b:cf:7c:28:be:6b:4d:b2:b0:cd:15:
fd:af:5e:23:59:32:c8:dc:bb:9c:fc:11:bb:2b:b5:e4:72:7e:
91:7f:29:17:22:66:0e:2b:75:d6:c7:a5:20:e1:68:06:15:18:
a2:01:d0:cc:78:1f:16:08:6a:81:f2:e5:b0:19:73:b0:94:e2:
b8:25:47:0c:0c:b8:fb:e7:0b:b0:e0:b2:f7:37:3d:be:9a:62:
6c:74:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:51 2025 by rpki-client