Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: 7tGhygngiOvM97v+JAFaYbolKsGBe8+3RtRx6vF9Euc=
Subject key identifier: 12:E0:40:70:F6:9E:47:9B:BE:34:E7:A0:A6:6D:9B:E3:DA:AD:9E:D3
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0197BDEC1A451E2557263C91A2EE8D11BF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 23:00:56 +0000
Manifest this update: Sun 29 Jun 2025 23:00:56 +0000
Manifest next update: Mon 30 Jun 2025 23:00:56 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: 0ObYs8akqWEq7dfj5od53+7O3keVfoMaCtrNUANi7ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:ec:1a:45:1e:25:57:26:3c:91:a2:ee:8d:11:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Jun 29 23:00:56 2025 GMT
Not After : Jun 30 23:00:56 2025 GMT
Subject: CN=12e04070f69e479bbe34e7a0a66d9be3daad9ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:f4:ce:0f:70:00:8c:79:e7:25:5b:c9:d8:
40:eb:53:2e:b0:e5:83:89:c3:f9:e1:15:11:21:0c:
5a:ef:1b:4b:d5:f9:7a:b7:2b:37:75:0b:ac:13:56:
93:07:ac:47:4e:9e:e1:05:2d:89:9f:dd:a4:de:67:
1d:35:41:55:ca:22:8c:36:df:9e:4f:af:4d:f3:6a:
a5:e9:33:ea:3a:ea:fe:76:a9:f4:26:c4:4f:75:b3:
b8:d8:a9:0c:55:4f:1d:b9:2a:96:a2:6d:48:d4:72:
7e:d2:01:d9:0d:8f:6b:31:b8:43:d7:82:c6:11:b0:
5d:ce:5e:c6:51:01:ff:ef:ce:07:e0:b2:8c:54:99:
9f:c8:a3:1e:86:c2:c5:1e:a4:92:e2:a1:69:c7:69:
1b:a1:25:f0:94:68:32:7f:4b:03:a9:fb:a3:99:bd:
b4:d4:52:11:69:45:a0:c0:a7:64:3d:b2:4d:27:30:
6e:26:78:a5:49:bb:f0:6a:dd:81:0b:04:40:8c:de:
9d:a7:5b:bf:c4:5d:6e:ac:79:bf:40:da:5a:9e:a8:
17:d7:d8:bf:b5:32:97:2b:ff:07:86:d1:93:da:fb:
b7:ae:0b:4b:0e:1d:c2:7e:78:06:1e:09:0a:30:66:
2d:56:16:39:d7:48:9f:98:c3:f3:70:ad:1c:d3:f2:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:40:70:F6:9E:47:9B:BE:34:E7:A0:A6:6D:9B:E3:DA:AD:9E:D3
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6c:3d:43:94:85:46:e1:54:6e:67:64:cb:6b:30:09:e0:9d:
8f:7a:67:a8:b6:97:11:a8:ee:89:98:7a:c5:11:a7:78:2a:b1:
b4:7c:4e:64:fc:5d:b7:c6:98:07:8c:4b:e7:62:8c:3e:f5:c1:
be:9c:bb:f8:12:e6:b6:00:f4:8b:4c:d1:6b:89:02:83:e8:94:
83:02:c1:9c:de:61:bd:8a:8a:cd:91:6d:52:dc:ed:b3:7f:93:
13:16:ff:3c:1e:67:a6:e8:dc:3f:b7:54:17:c4:3c:af:6c:55:
66:38:d5:f1:5f:32:6f:c6:8d:90:2d:2d:3a:6f:97:4b:36:9a:
ee:f4:5d:e1:e6:50:fa:ad:2d:ca:6c:29:dd:37:b8:33:fa:51:
78:dd:59:89:12:ec:ef:30:ee:28:b3:1c:41:5e:c1:91:de:a2:
17:d2:55:14:de:b3:60:8c:1f:8a:eb:25:9e:d7:68:b4:52:33:
51:3e:c7:c7:eb:56:d5:ef:9f:94:4f:39:5c:1f:13:2a:c2:cc:
4c:e7:6c:87:f4:21:d6:52:0d:e3:a3:74:0a:60:5a:a6:ef:c3:
01:20:1c:12:b3:42:33:e1:76:87:73:2b:9d:b6:5f:7d:64:3e:
36:ca:67:09:d1:03:1b:86:fa:34:50:f2:b6:ef:1b:64:bd:72:
11:a7:bd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:15:39 2025 by rpki-client