Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: rHoB+3oEng3Ygr7NbisC0f4FnK3VPKc0FYclmKr1HVQ=
Subject key identifier: 6D:89:00:1E:25:8A:71:1B:D8:E8:C9:EA:3C:4A:99:5A:F5:C2:32:66
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0197B857AF570F783DAC180A58731D50F343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: FVcEMX+paOPEKRQRizLMj/3GXBjWcWcl2h0tU6VDPws=)
4: bS5YSgAKX0HkW54E0HVUNxldIao.roa (hash: bgWqYBeGr9CBOGfawWHHQ8eLh1SoZErK0UBEsECW+bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:af:57:0f:78:3d:ac:18:0a:58:73:1d:50:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=6d89001e258a711bd8e8c9ea3c4a995af5c23266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:da:79:f6:01:49:a5:62:94:13:40:c9:a6:
f4:5d:64:fa:72:31:15:7b:7b:1f:71:d9:cc:2c:6f:
62:e8:c1:45:32:1c:cd:74:7b:5e:5c:15:0c:08:53:
57:7a:e4:be:34:74:4b:7d:f3:06:58:f1:0c:f5:f6:
a6:9b:06:dd:8a:40:e9:cc:22:31:7c:64:b4:39:0b:
d3:2d:cf:83:5a:ab:38:fb:78:8c:7f:a7:43:a4:d5:
11:85:ea:7a:b5:ed:7c:1a:49:d1:f6:70:46:0a:d1:
13:bd:21:5f:4b:53:d3:f3:27:31:e6:53:6c:79:e8:
67:fa:d9:36:d1:a9:e0:e6:e3:32:39:f0:a0:1a:b2:
91:d3:4d:1d:0a:2c:fb:00:52:e5:3a:fc:45:a1:b8:
be:18:5a:2c:6f:97:a7:ac:fa:c8:52:7b:f3:30:88:
d1:a2:6f:af:40:62:1f:59:a1:84:ea:6a:1b:61:df:
5f:1c:59:d6:85:2c:7e:ca:7c:86:06:d9:f9:4b:53:
cf:4a:5e:82:ca:eb:11:81:58:66:87:f3:56:57:09:
a5:8c:5e:b5:21:7c:21:2f:f5:4d:02:05:6a:f8:7d:
7f:87:87:97:13:07:14:c6:a2:33:9a:6a:ac:61:c9:
0c:61:85:c1:ee:63:2d:d0:d5:0e:78:9e:63:29:9e:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:00:1E:25:8A:71:1B:D8:E8:C9:EA:3C:4A:99:5A:F5:C2:32:66
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:ef:aa:e8:fe:8c:eb:01:fd:09:f7:0c:d5:25:6f:db:d0:
8a:ab:ab:2e:5b:38:e6:9c:b4:f4:2e:ec:29:56:d2:57:46:fd:
4c:0f:98:58:9c:56:c9:13:a2:04:31:40:80:bc:88:d8:15:3f:
fc:39:13:67:cd:f9:09:1b:f8:25:9c:17:8a:d7:42:54:1d:b7:
b1:f1:9a:e6:cf:48:37:77:3d:99:5a:8e:8b:02:20:e8:9b:76:
f2:53:a5:3e:f4:9f:ae:d5:cf:49:6e:d9:7b:de:38:c3:a6:2e:
a7:91:59:11:0a:9a:f8:08:9d:21:bc:35:90:f4:be:ba:2e:d9:
14:60:cb:a1:8f:7d:3f:ed:3e:c9:57:53:01:62:7f:52:e1:2e:
b5:fa:da:52:e2:94:07:14:fb:81:88:a6:a4:4d:8b:71:a3:d8:
fd:10:78:90:a0:d2:97:aa:0d:22:a8:b0:7b:70:c3:73:00:d5:
7f:46:1f:21:8b:9e:17:ec:89:e5:05:a6:c0:ea:53:38:36:59:
63:f8:ee:46:8f:62:60:03:0c:b7:03:ee:4f:d4:81:95:95:6e:
00:28:66:96:9a:c4:3a:f2:ff:57:c5:ea:e8:ac:10:32:e7:0b:
7d:c5:d5:57:f3:ce:fd:11:91:ef:66:8c:21:af:b5:84:76:04:
5d:c4:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:00 2025 by rpki-client