Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: 3l38+GmR4m4urouZoeSPVnrOLFBmsZJkoJczBqqOrKc=
Subject key identifier: 34:35:B1:2F:54:BE:1D:09:9E:8C:8E:DC:69:4D:79:F5:B8:13:AA:A8
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0197B6D77F0A320821AF1F1A31FC55925F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: UEzPFyE7Np5ivk59W0y6RhOdWiwxYAr9Ckfa++IX1Zs=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7f:0a:32:08:21:af:1f:1a:31:fc:55:92:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=3435b12f54be1d099e8c8edc694d79f5b813aaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:94:5d:9f:a3:6c:c3:e3:38:1e:f2:f1:ce:
6a:85:8f:64:da:5d:89:5d:b9:7d:d9:34:e7:0a:17:
2e:e6:6f:76:8a:47:fb:34:02:5c:94:e5:94:d3:e1:
60:af:7d:a3:74:be:4e:93:08:57:e6:b8:99:d3:a9:
e3:e3:9d:27:0f:e6:de:13:f8:92:6a:b6:ed:06:42:
66:69:a5:bf:ca:8a:c6:03:c0:51:dd:58:9e:af:42:
7c:ef:bb:a7:68:c1:fa:db:8c:53:04:3b:8b:cc:2c:
8c:cb:d6:f6:1d:56:09:00:96:bc:a6:57:4f:22:ed:
42:45:b3:f5:cd:d8:b2:d2:a9:6d:4d:47:ca:24:52:
c2:8c:37:c0:fd:ab:33:e9:32:27:5e:ac:af:7c:95:
23:a0:a4:09:0a:b5:0a:06:f4:1d:91:9c:e7:c1:7c:
9e:28:58:c0:0b:ac:af:be:5c:47:a0:d0:9d:0a:5e:
bf:be:a6:00:b4:9a:e3:06:f0:35:38:10:28:1b:69:
de:7f:0d:02:fc:b7:f8:58:f3:53:ed:ea:dc:2c:59:
45:9d:f9:e3:54:c1:ec:b5:14:da:21:a3:f4:72:1d:
3d:d9:35:ae:d7:de:a3:3b:30:98:f9:6f:7e:a5:b9:
e0:74:7c:a8:94:f7:8d:cc:69:9e:c6:e6:56:b8:e0:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:35:B1:2F:54:BE:1D:09:9E:8C:8E:DC:69:4D:79:F5:B8:13:AA:A8
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:37:7c:6b:39:f4:4d:b8:e1:f1:7e:9f:78:92:1b:e0:e3:
84:27:44:d7:7d:2b:1a:b4:99:f1:cd:d9:42:ba:01:52:e4:4a:
bd:b2:7d:c5:e3:22:bf:53:a4:29:17:6c:71:76:51:aa:34:a9:
63:d8:ba:17:d6:1e:5e:4d:a4:cb:35:4a:ce:e5:5c:86:03:35:
fc:a4:bc:6c:31:e2:2d:23:63:00:b6:8d:70:d5:e2:95:c8:1b:
8e:a9:ee:a3:26:c1:24:74:f0:b5:da:06:74:97:55:a0:99:50:
4a:a9:52:ca:6a:cd:ba:e0:e3:f0:5b:7b:35:6d:59:8b:cd:86:
8e:6d:79:ff:09:85:23:3b:4f:dd:1c:77:75:4a:42:f6:1e:2d:
0f:95:c6:2c:24:37:8d:be:72:a4:cb:ba:f2:b8:e2:11:2a:ea:
58:50:9a:97:ba:64:a5:94:ee:c9:2f:71:5c:20:bf:10:df:01:
af:75:69:e0:19:d9:bc:a0:e0:aa:31:69:a9:12:4c:34:cc:c3:
0b:94:37:02:99:f8:8a:d0:c6:1e:ca:34:26:8a:50:15:aa:ed:
10:4f:9e:9f:60:38:a2:55:de:ef:60:eb:36:31:4d:e3:b0:21:
c0:78:b9:1e:ef:53:4f:df:77:95:26:c8:fe:35:1b:6b:01:23:
83:11:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:29 2025 by rpki-client