Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: eBv5Y9yNyxLtUtclmYW5mI0WJjiooK/gj0jc0hwrRBQ=
Subject key identifier: B0:63:F7:A5:D3:BC:46:74:9F:5E:49:D8:D5:7F:AC:55:4C:25:33:76
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 0198D73B66B596A08736A94E7B80A4E8E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 072A
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=)
2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: 176IFUUp3HIDjSLh5zcyrLyrwPuftzvjBTjyXaQlNeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:66:b5:96:a0:87:36:a9:4e:7b:80:a4:e8:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=b063f7a5d3bc46749f5e49d8d57fac554c253376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:f0:79:d1:ad:9a:d4:f6:81:11:90:26:cd:
f1:56:b1:7d:a7:bd:23:aa:bc:10:b6:3d:57:85:4b:
ed:ad:bd:10:92:fe:57:64:3b:f1:22:5b:83:33:be:
d7:73:2c:ea:9d:47:1a:7e:27:88:c8:e2:30:bb:24:
4f:19:e9:e7:04:03:d1:42:9f:bc:68:2c:29:01:06:
5e:f5:84:d9:89:96:74:90:e1:19:7f:46:43:cf:d7:
3f:40:1b:b9:66:63:9a:4c:18:af:ca:a7:37:9d:94:
f4:7f:ed:c0:d2:90:ee:36:8e:c4:87:91:d9:a2:d8:
ca:0c:6d:ac:b4:66:9d:70:a7:7f:56:de:e7:7c:7f:
01:47:33:48:34:60:8f:7a:67:3d:e8:c7:f6:53:e6:
96:74:91:41:65:e0:61:4f:ab:92:e5:92:4c:e5:da:
ea:a9:6c:b8:ad:ea:df:f0:e2:1b:ea:c4:c5:5c:bd:
cf:d2:95:82:e2:04:94:d3:81:7a:c4:d9:db:68:f2:
f9:cb:f3:f5:b7:d4:ae:b7:1e:2e:aa:4e:4c:58:0c:
f2:1d:7a:f7:12:29:d8:6c:0a:33:32:71:1f:27:a7:
1a:a4:89:20:8a:45:ae:68:b9:f0:8f:dd:84:4f:df:
64:cb:43:7b:e9:ad:dd:a2:13:94:53:b7:cf:d3:a1:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:F7:A5:D3:BC:46:74:9F:5E:49:D8:D5:7F:AC:55:4C:25:33:76
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:65:4b:91:e2:07:72:93:94:f5:a9:d4:c0:85:a4:84:77:d3:
1a:3d:1e:7a:50:15:84:28:78:b0:c9:9e:e6:a6:a0:22:5e:b4:
32:9c:3d:4a:51:de:1c:9c:26:c2:2d:d7:f2:c7:bd:49:de:1e:
58:60:84:17:f6:75:2e:78:35:96:49:fc:91:1c:c1:86:29:7e:
c3:87:ff:07:d7:76:f4:ab:ed:23:8c:7e:8d:ce:b0:9e:63:2c:
b2:ba:c1:b1:61:02:7f:1d:37:f7:55:15:01:c9:5f:c4:00:62:
1c:6c:45:86:50:9a:d1:c6:86:27:5f:a8:c0:f1:e0:45:76:b9:
0c:6a:de:12:f8:4c:02:2a:94:22:d3:ec:c2:52:25:de:1d:fd:
6f:7b:89:28:d6:e4:39:0b:a6:9c:eb:57:a1:21:9a:c9:96:cb:
c2:71:7e:0a:28:97:6e:4e:35:ea:d1:d0:9c:25:d5:b8:0b:0a:
fa:28:91:6b:cf:f0:0c:9a:e8:89:b6:42:30:df:20:50:01:e5:
cd:c8:10:b1:14:52:4c:18:ea:85:0b:95:c7:2b:8f:a3:87:0f:
1d:33:62:cf:a8:6e:4a:c8:6a:66:ec:26:92:14:2a:74:1e:be:
79:fd:54:7e:ae:04:c2:54:ea:d0:2e:11:18:27:23:bf:08:5c:
5e:25:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:01 2025 by rpki-client