Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: mMcDLeniPLq5gnduk82XSXklS3Zvj8AqiCyFlLF0BMA=
Subject key identifier: 67:18:74:99:C8:6A:7F:99:A0:60:FA:6A:80:4D:1E:D6:27:C3:0D:80
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0198D5F16E4AF580406EE45EDF861186D406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: 65MqBtU0D+mGPlF8IzADxA3OJYzBlvP9VyXZ/+7oRC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6e:4a:f5:80:40:6e:e4:5e:df:86:11:86:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=67187499c86a7f99a060fa6a804d1ed627c30d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:17:46:53:28:c0:c9:c2:87:f2:f8:14:db:
b5:57:d6:fe:8b:ac:70:2f:1b:e4:3b:80:be:eb:35:
26:03:cb:5f:1c:45:0e:06:db:c9:47:18:bd:0b:f5:
68:6a:fd:9f:40:1b:81:dc:2c:6a:63:8a:72:94:3f:
30:f1:b3:13:9e:1e:29:af:0c:d2:70:99:f7:d4:07:
dd:45:e9:00:1d:ef:ec:08:8a:c3:03:66:10:4f:e8:
32:e8:33:94:39:be:ec:ee:ac:67:dd:b5:c1:5e:48:
96:e8:f4:fe:e4:ef:ab:b7:67:df:19:e6:ac:ec:e7:
0c:69:6c:0f:9b:54:fa:1c:a4:93:ad:ce:d9:6b:be:
58:38:0e:2c:b2:fb:4d:09:e5:2c:9a:a3:9a:fd:1a:
07:4d:94:5c:03:38:4f:e2:1e:b1:62:e6:f8:36:b4:
83:ce:23:69:8d:a6:ea:46:f9:56:e5:1a:be:03:be:
a7:7f:4b:4b:ef:8b:8c:18:91:80:f7:74:70:69:a7:
79:bb:2b:d7:59:a1:80:74:02:6e:13:3d:a7:18:af:
71:cb:66:40:e2:4a:76:78:ca:1c:3d:90:9a:80:82:
1d:3f:76:9d:c7:20:1b:9a:77:5c:25:de:24:69:d1:
ee:9e:df:aa:bb:ad:4e:4d:53:f3:60:46:d0:50:57:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:74:99:C8:6A:7F:99:A0:60:FA:6A:80:4D:1E:D6:27:C3:0D:80
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:89:6c:bc:50:94:eb:dc:f2:58:2a:d6:b1:17:09:a6:b3:c2:
db:81:dd:c8:8c:88:39:31:d5:38:ad:d1:10:11:bf:91:c2:27:
55:94:6a:3e:70:e6:ed:58:ee:15:06:9d:37:db:d0:6a:4b:8c:
71:8b:86:24:2f:fd:0b:9e:21:7d:98:27:4a:e8:d8:ac:61:85:
44:d6:02:8e:77:9d:6d:9b:3a:3d:39:f8:84:78:04:c6:2d:36:
e0:d2:59:f6:10:69:32:19:2c:93:5d:87:c5:33:01:4d:e1:4b:
4a:02:92:a2:8e:e2:15:ea:cd:43:15:4b:a3:0c:bf:7e:71:78:
11:e3:69:51:00:93:28:99:7b:b2:b5:05:d1:2c:69:88:06:3e:
6e:93:1f:66:b8:a9:c8:c7:1d:09:3b:18:01:4f:e5:dd:eb:7b:
7f:ee:e7:2f:eb:41:cc:92:24:f5:07:56:11:92:d6:d3:bc:8d:
d9:7b:d0:a2:b0:77:77:65:63:d0:51:f7:cc:af:6b:a8:94:ea:
bb:7b:6a:46:4a:d4:5f:4b:de:da:4d:8b:96:f0:8d:6a:28:91:
4d:e8:2b:f0:d8:0f:d7:03:ee:5e:c3:90:87:a1:b6:85:b8:6e:
57:4c:a2:b1:c0:d8:6f:00:d3:d2:30:92:6b:7f:c6:50:a0:93:
a8:b3:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:29 2025 by rpki-client