Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: TZqD3L8Ewe91Jqid2AcNGtaM+E7XelqsOcgAkMNGMAc=
Subject key identifier: D5:42:9C:77:E8:FF:FC:6B:5C:99:5E:66:D3:94:2B:8B:00:F4:1A:01
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0198D73B33E5713CD8258220BFBDA39DA058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 14:00:37 +0000
Manifest this update: Sat 23 Aug 2025 14:00:37 +0000
Manifest next update: Sun 24 Aug 2025 14:00:37 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: N/iWVA8yUw0G+EkkOC7uY5+ZBa1a0PV5jo9+3iLuytw=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:33:e5:71:3c:d8:25:82:20:bf:bd:a3:9d:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Aug 23 14:00:37 2025 GMT
Not After : Aug 24 14:00:37 2025 GMT
Subject: CN=d5429c77e8fffc6b5c995e66d3942b8b00f41a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:a9:68:74:b2:5e:8e:a1:38:53:0c:b5:e6:
dd:56:79:01:9a:71:ac:e1:ca:5d:ad:f5:9b:6c:eb:
79:77:9a:71:f7:e9:0f:f4:16:2f:47:e1:3f:08:47:
6d:e0:57:1b:29:9e:05:ca:b2:56:aa:ab:3a:4b:e4:
29:f0:4d:66:36:10:80:6a:50:47:c4:56:d1:d2:fe:
c2:21:55:be:ab:05:60:88:48:35:31:09:17:c9:0d:
13:27:2a:96:b5:05:32:61:78:96:da:3e:58:db:79:
55:a9:7a:98:f1:67:8d:cf:c7:a1:90:5b:e7:0e:08:
f5:e8:ea:35:9e:84:a9:45:23:dd:d6:53:d5:b4:54:
e6:cd:73:8c:cd:6e:2c:04:34:4b:1f:d1:68:f0:2a:
d2:6b:d4:0f:60:08:fa:58:eb:12:a0:04:f3:04:1f:
75:50:fb:15:94:f6:13:7d:12:49:91:71:83:54:d4:
8b:17:4f:46:2e:9d:58:9f:dd:29:fb:8b:17:b4:4a:
8d:f2:b2:c6:75:7b:fe:4e:a7:b7:8e:87:4f:05:48:
c6:22:7c:27:89:58:b2:3a:79:16:26:84:e9:94:63:
24:0d:32:fb:6b:78:e2:80:10:e0:e2:52:8b:19:6b:
cd:9b:0a:17:93:fa:10:01:dd:18:99:77:ee:7b:83:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:9C:77:E8:FF:FC:6B:5C:99:5E:66:D3:94:2B:8B:00:F4:1A:01
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f3:99:dc:88:02:e3:65:97:b9:16:d4:b3:34:17:63:1c:9e:
37:5c:6c:52:fa:96:69:ea:0a:f1:76:c4:c9:cd:89:e4:e3:3e:
f8:db:17:41:ee:3a:84:88:d8:17:86:43:e3:84:8b:47:58:fb:
5a:e2:08:e4:4e:84:cc:e1:56:d7:e2:f5:4c:94:d1:44:ac:32:
56:df:55:fa:7e:b1:3a:9e:3f:03:96:56:0d:5d:0c:b5:78:e6:
83:12:49:31:96:f6:c7:90:e9:c4:38:2f:e7:9f:d7:49:da:e9:
f8:5e:75:be:9d:8a:42:39:b2:1f:59:72:eb:9f:86:d9:ba:43:
79:32:4f:a1:ae:bf:59:63:5f:54:26:f4:58:40:de:2e:27:de:
1d:a9:a1:83:3d:36:a8:f0:ca:c6:e1:79:a1:bf:54:aa:6e:12:
b3:c9:1d:05:e8:4f:6b:38:f7:33:4e:96:d4:6d:37:d7:9b:71:
78:e8:5e:3e:68:76:7d:4e:01:46:84:2d:4a:bd:34:09:cc:49:
ae:b8:ea:b2:47:18:27:f9:89:fd:29:53:39:8f:61:3b:07:82:
b3:96:1e:51:25:a3:5f:f9:7d:99:36:16:3b:65:33:a4:44:a8:
6f:2d:62:85:98:97:dd:49:45:6e:01:b6:8b:88:6e:c5:68:83:
f6:c0:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:18 2025 by rpki-client