Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: H1VqknEU5F9iFD7HalhTn/RnxLiUc+OSOvTYyYQ41qE=
Subject key identifier: A2:3A:B4:F8:BF:F3:40:96:C5:47:D6:C5:5B:83:06:11:A0:E5:7E:C7
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 0197C2DB927C7917167FCD96CC9B247F7FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: B4
Signing time: Mon 30 Jun 2025 22:00:59 +0000
Manifest this update: Mon 30 Jun 2025 22:00:59 +0000
Manifest next update: Tue 01 Jul 2025 22:00:59 +0000
Files and hashes: 1: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
2: BNA4ARff29zCBfR6242MtTb6TGg.roa (hash: tJrTcm7xH3ApI498oc2nbD1Dbkv2EhPah1ZZUS9A5bs=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: 8sOcHItXwc0dSDRnWmq1Ei7OMgziQdwQbuKFIVzMMUg=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:92:7c:79:17:16:7f:cd:96:cc:9b:24:7f:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Jun 30 22:00:59 2025 GMT
Not After : Jul 1 22:00:59 2025 GMT
Subject: CN=a23ab4f8bff34096c547d6c55b830611a0e57ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:81:b0:d4:aa:2a:1c:f3:b1:76:8b:fa:26:7d:
dc:d7:5e:5e:fa:ec:4f:75:7f:5d:3a:ea:6f:5b:24:
96:0f:0c:e9:2c:fc:73:e3:72:a1:86:f1:99:e5:f4:
2c:de:74:28:98:44:86:91:c0:18:9e:db:99:ec:7f:
02:ff:be:31:b6:29:2d:e2:4c:e7:d0:8d:00:60:a6:
85:85:f1:bf:b8:cc:2c:0a:94:17:32:f0:4f:83:a1:
31:29:ad:39:f0:97:0b:38:a6:c1:11:d8:fb:7b:b8:
93:67:30:a2:4f:c7:02:70:3e:d9:7f:50:21:5c:78:
58:e2:36:35:7c:e3:42:f1:a8:e2:ef:67:c6:45:11:
a2:b2:18:59:f7:08:97:66:66:aa:cc:2f:fd:61:d5:
64:4e:31:6b:ab:d5:3f:fd:44:cb:ea:14:65:40:49:
99:20:ab:da:21:0f:4f:f1:6c:3d:65:d1:b1:ee:99:
f3:89:72:95:f9:c5:b7:7e:72:7b:69:e3:e8:8e:2e:
4c:5f:ea:8c:05:11:cc:56:88:46:37:ad:80:11:4e:
f1:2b:3d:db:f8:4a:32:82:d4:ae:90:91:52:1b:81:
7c:1f:f9:5c:c0:72:cc:11:3d:f7:4c:08:d0:c3:ca:
7b:97:c7:95:df:33:58:3a:eb:b4:20:c7:10:3c:a5:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:B4:F8:BF:F3:40:96:C5:47:D6:C5:5B:83:06:11:A0:E5:7E:C7
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:2e:a0:e8:61:4b:c7:3f:6d:1f:c1:51:04:5b:d2:4d:60:
b8:98:68:93:25:95:5b:58:74:48:5a:17:06:b3:7c:84:70:ec:
20:e5:69:0a:06:2b:db:0a:98:c5:48:e5:31:9e:78:0f:04:d9:
c3:11:bb:3d:b6:ca:d4:0c:14:73:3d:27:3f:81:ed:d4:aa:a0:
e4:6d:f4:d5:0d:22:d3:a0:76:10:d1:99:11:7f:20:2f:fa:f5:
d2:82:f6:b4:24:1e:c0:0a:cc:00:e5:9d:a6:db:76:c8:f8:7b:
40:d0:b8:13:4d:82:70:c6:68:4a:79:63:f3:7c:b3:8e:a8:b1:
c0:0a:cb:3d:f3:35:33:5d:2b:73:3a:2e:8e:59:f9:1f:99:99:
60:f3:70:b8:ae:96:02:0e:0c:46:25:8f:e7:d9:a9:23:db:07:
53:1a:e6:25:ab:bb:3b:d5:b9:35:80:0c:69:12:26:9d:bf:5c:
ed:91:b3:f0:77:4a:86:ea:9d:d2:9a:d4:c9:82:b0:de:5d:71:
bb:ab:98:26:5c:37:fc:21:8a:f5:e3:b8:13:40:d2:92:36:9d:
43:16:6e:67:c6:1d:ed:51:17:dc:9a:fb:6c:47:90:ee:eb:94:
8a:1a:15:02:10:17:d0:da:3d:cc:64:63:ed:fc:66:84:fa:0f:
53:45:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:50:54 2025 by rpki-client