Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: wZO2596R1MAhWHyl2+srBSL3hAkttdbjIVe5PaY2X+0=
Subject key identifier: 9A:5A:40:25:F7:E0:4A:46:DC:2A:17:C3:CB:C8:34:99:0F:A2:AC:70
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0198D65FEF58C481EBF1B3855C83FA87E9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0EF8
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: xa+zPrLMHDMppuuPJvOTboPrBOMIa0L/Q1UnGmQ2X4Y=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ef:58:c4:81:eb:f1:b3:85:5c:83:fa:87:e9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=9a5a4025f7e04a46dc2a17c3cbc834990fa2ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:0d:05:f2:11:21:29:4b:b1:c6:e2:71:63:
46:21:8f:7b:78:89:de:ef:a4:15:99:f4:90:96:ae:
0c:00:40:15:e9:99:0f:50:21:62:95:ec:e9:85:43:
34:37:99:77:b4:fd:93:c4:2c:96:aa:70:52:2d:13:
47:26:44:a1:26:ea:ea:33:52:d3:77:32:dc:34:74:
c7:fb:14:c3:c9:89:4a:e9:9b:d8:75:22:06:ba:d4:
95:ef:4c:6e:92:ef:ca:e7:fc:ec:80:de:0d:bf:67:
a8:48:86:21:a9:00:ef:c5:fd:40:41:3e:5e:c0:66:
e5:e0:73:8c:84:27:c9:69:fd:b0:02:8d:e9:6c:a8:
bd:2e:b5:1a:4f:d9:1b:0e:3e:32:67:56:77:97:ae:
82:28:d5:10:54:e0:2c:57:b9:b2:8c:49:dd:e3:fe:
d7:e4:ed:3c:ef:6f:ef:d9:8f:a3:f3:96:f7:fe:e8:
3c:7e:97:81:ff:12:c4:d0:a6:cb:09:46:87:13:71:
f4:40:33:9e:fd:a0:8f:d2:90:f8:cf:88:3d:c0:e2:
10:04:0b:42:51:65:4c:d8:c0:c9:fb:dc:c7:bf:20:
83:17:e6:f7:80:66:07:59:58:36:da:42:59:4c:b7:
d4:a7:a2:49:6f:09:36:20:bb:5d:86:90:d4:e1:5f:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:40:25:F7:E0:4A:46:DC:2A:17:C3:CB:C8:34:99:0F:A2:AC:70
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:08:6e:bb:7f:1c:0f:0c:fb:f3:aa:f4:89:19:cd:2c:bb:2e:
8c:f2:50:1f:9b:28:ed:5b:aa:fc:2f:c9:bc:e4:14:dc:63:e5:
18:6c:56:16:db:12:95:0e:f8:60:a6:ed:af:71:51:68:b4:53:
7b:83:3a:33:c8:0d:5b:00:af:a2:e8:05:6e:9d:78:8d:fe:dc:
a8:8b:92:47:70:eb:ae:8e:69:74:03:b6:b6:ff:cb:0a:5b:51:
d1:d4:1e:52:5c:ef:80:2b:d1:e6:41:d0:d6:27:59:e8:05:f3:
2d:35:11:c0:77:2c:f2:87:bf:a0:d1:e8:95:a8:cc:b6:3d:9f:
c7:e0:59:4d:f8:15:4d:23:4b:7e:66:34:60:99:b6:cc:f3:d6:
6b:8b:d1:6e:2f:9f:a5:70:e9:26:2f:00:68:c1:4b:bc:0d:bf:
4f:e9:67:8e:30:87:00:41:fb:5d:0a:17:8f:c0:6e:45:b7:46:
26:9b:c0:ec:88:16:81:88:8f:51:7c:7e:62:bb:66:8e:5d:a4:
e2:b9:1c:b7:a0:d0:18:fe:55:d6:eb:a2:c9:b0:df:df:05:3f:
e2:a5:d2:e6:60:9a:6d:70:dd:86:38:78:d3:49:db:8b:6d:5d:
eb:db:46:ef:96:4c:05:6a:72:5e:a0:f2:c2:ef:8e:bb:89:41:
1d:5f:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:43 2025 by rpki-client