Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier: zsAYhGXcuw1+5VIecnsFwn+l6pTV+SDNzvBLVgZEMBc=
Subject key identifier: B7:11:B4:51:72:1C:EC:E9:42:78:E7:CA:B6:60:5E:F5:64:AB:9F:65
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 0198D4732E40381CAC4D2F9F29934B3CA577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number: 12E7
Signing time: Sat 23 Aug 2025 01:02:54 +0000
Manifest this update: Sat 23 Aug 2025 01:02:54 +0000
Manifest next update: Sun 24 Aug 2025 01:02:54 +0000
Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: +1U1/b9r7GWpOSjddLgFCtgaWytdOz51K6sdt5uxiLc=)
2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2e:40:38:1c:ac:4d:2f:9f:29:93:4b:3c:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: Aug 23 01:02:54 2025 GMT
Not After : Aug 24 01:02:54 2025 GMT
Subject: CN=b711b451721cece94278e7cab6605ef564ab9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:45:97:18:a0:5c:71:26:54:5d:bb:0b:d7:
4a:58:dd:22:50:ce:6d:25:0a:cf:ee:c9:f9:ca:f4:
34:99:eb:11:b7:32:fd:5e:29:9f:77:67:96:ae:f7:
66:71:a2:50:52:1d:9b:ee:dc:3e:1f:5a:ca:f8:c8:
44:8e:29:30:e1:a2:1d:c2:36:64:f9:14:87:ec:ff:
39:c5:34:3b:58:af:79:6c:43:6e:75:1a:94:0c:7f:
da:3d:01:5f:49:1e:aa:ec:aa:3c:8e:94:fb:d6:7b:
11:a6:90:18:8a:ff:06:e6:51:54:aa:29:d7:bd:e3:
81:b9:79:c9:a1:9c:d0:12:9f:90:a7:f6:0c:8f:bb:
3e:d4:1f:ac:86:04:0d:a3:28:13:48:f5:de:32:c1:
ba:08:3d:5a:3a:6f:05:da:6e:64:3d:fb:29:0f:30:
8f:5c:1a:86:e7:eb:b5:b8:8a:1d:ca:83:19:84:33:
fa:84:eb:c7:55:5b:ce:a0:e9:b5:25:aa:05:41:62:
d9:35:26:e6:7a:f4:f5:5b:f7:1d:c1:21:85:11:a4:
b3:06:c5:05:29:88:9b:f2:98:0e:20:93:66:02:90:
55:4f:ea:e1:7b:17:9b:d4:64:94:78:f7:99:88:dd:
ba:ca:ee:5d:45:2d:73:a4:d2:1c:2e:58:08:20:98:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:B4:51:72:1C:EC:E9:42:78:E7:CA:B6:60:5E:F5:64:AB:9F:65
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:77:0d:0b:a0:4a:32:7a:4a:96:82:18:87:64:52:5e:69:eb:
96:cd:16:37:12:25:85:94:d2:89:61:86:d6:dd:d3:c0:de:8d:
4f:db:29:0d:fd:68:32:1e:00:1d:e0:cc:a3:2f:83:b2:ed:e1:
ca:ff:59:30:6b:52:ec:93:39:0d:c3:72:9b:32:c4:c1:13:d3:
f5:5a:a5:a0:d9:76:2d:ff:0b:7a:6c:cd:39:83:58:3b:7d:12:
66:83:db:08:ab:d4:74:4f:11:5a:98:89:01:4a:63:2c:b6:32:
3b:78:7b:ec:68:0b:cc:87:6a:90:a5:fd:97:81:20:98:85:8d:
91:5b:20:7a:4e:e4:5d:dd:55:8f:75:48:1c:06:57:89:bf:61:
4f:69:f7:52:cc:d4:af:2d:5e:d5:40:8d:a9:72:67:ac:9d:52:
e5:52:37:7b:b5:d5:37:20:c4:43:d8:ad:b9:e5:66:09:30:50:
8f:ae:80:16:04:05:17:b4:6e:f9:2e:40:bb:37:83:fc:5a:f7:
36:8f:b6:32:d3:1c:8e:d2:c7:03:59:fd:9d:1b:7d:bd:78:87:
28:c5:3e:51:d1:49:ab:18:0b:22:87:ae:e0:3e:de:f2:c3:8d:
93:33:8d:22:23:35:13:a0:af:0f:65:dd:4b:5c:a3:be:c8:cb:
42:c0:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:10 2025 by rpki-client