Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: 8Tus+Rq5dTAPZft39X7G126k+pJqwkGqjYaSnpjaGs8=
Subject key identifier: 42:65:EA:54:E9:17:4B:43:5B:29:F7:97:D6:CB:2A:78:E1:22:2C:5E
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 0197C56EA8487B85EFD2AA8F2FEE8CFD0F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 02D5
Signing time: Tue 01 Jul 2025 10:00:52 +0000
Manifest this update: Tue 01 Jul 2025 10:00:52 +0000
Manifest next update: Wed 02 Jul 2025 10:00:52 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: kEZg8bEZp27hgaiim+h0+M5VnGjt708oBlJuD4sr0Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:a8:48:7b:85:ef:d2:aa:8f:2f:ee:8c:fd:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Jul 1 10:00:52 2025 GMT
Not After : Jul 2 10:00:52 2025 GMT
Subject: CN=4265ea54e9174b435b29f797d6cb2a78e1222c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:ea:6b:4a:23:79:a4:65:12:2c:c6:a8:23:
6d:e6:86:c0:d1:65:f4:be:de:4c:f3:23:1a:8f:86:
91:9c:a4:4a:87:c4:4b:7d:a1:11:74:55:0a:a9:56:
dd:05:6d:a5:36:e7:24:6b:45:7c:ea:83:b6:19:5c:
fa:61:5f:00:a3:23:0c:2b:08:bd:90:c0:60:c4:82:
1e:78:ab:7a:14:f6:15:ab:1b:8c:2d:b0:7c:b7:2f:
77:6d:b3:1d:fb:81:cd:09:c0:b3:27:32:22:fb:41:
8d:d3:23:08:02:dd:a4:85:cd:15:d6:95:ed:e8:a5:
80:b0:91:28:cf:7f:7d:8a:7d:f1:ee:2e:24:35:69:
4f:9f:c1:11:07:18:e3:5c:3f:b8:a6:8a:8d:e1:83:
20:3b:0d:56:77:9e:a4:b0:2e:e8:51:ab:33:03:4f:
7e:23:49:09:1c:21:4b:8d:19:6e:24:fb:fb:55:0b:
14:57:76:8a:d5:d4:9e:0c:8d:00:5c:b5:ec:45:ec:
e5:dc:b5:bb:d0:84:cf:56:a3:11:ed:26:4e:e6:7d:
b6:b1:58:c2:dc:61:66:fc:41:69:54:34:ac:bc:7f:
4e:d3:d8:f5:8c:01:5b:ce:c9:99:e5:c4:c9:f6:7c:
bb:39:08:45:4a:92:ba:f5:6d:90:11:33:0c:f4:1e:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:EA:54:E9:17:4B:43:5B:29:F7:97:D6:CB:2A:78:E1:22:2C:5E
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2f:76:c7:12:05:f0:c3:1e:e8:15:fe:0f:21:8f:f7:87:3c:
82:b1:c4:43:70:88:22:b4:f2:f6:11:93:9d:85:f1:75:01:cf:
ad:f1:0e:42:85:52:1d:69:da:f9:5b:0f:36:35:5f:26:31:6d:
27:fa:f3:22:5d:de:59:bd:e5:41:de:89:16:3b:4a:ed:1b:38:
e0:b9:06:67:57:77:f9:87:a3:48:26:34:92:56:39:c6:6e:cb:
be:81:2f:93:4f:85:37:84:b8:44:ee:41:78:a7:79:d8:dd:07:
80:a3:8e:50:4c:71:3d:49:b4:85:fa:26:98:32:70:c9:50:3f:
96:d3:13:54:02:a0:21:e8:4d:3b:bb:cf:04:23:2c:91:fd:0d:
d5:74:12:8f:70:7c:fd:82:e2:5c:f6:9b:87:9d:e2:8b:9d:cf:
28:59:17:cc:d0:84:2d:a8:a4:a9:dc:79:a8:eb:5b:6c:f8:64:
4b:05:83:61:08:07:2a:85:f0:25:e7:c8:db:da:86:78:12:37:
87:8e:dc:dc:ff:56:89:47:af:a9:58:c7:5c:a1:60:26:39:28:
f7:48:cc:d5:54:b4:cf:bc:b8:63:cf:14:a4:9c:d5:21:41:69:
4b:8b:9d:cb:1d:0b:7f:1d:1f:b1:85:f2:8d:79:14:0a:b0:7e:
bd:6f:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:56:08 2025 by rpki-client