Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: 3yU243FrAAmKON/1F2x1zXNarj+QbjBmNids82p27u8=
Subject key identifier: 8C:85:B5:3A:26:F8:93:93:1F:7D:43:A8:47:3D:26:8D:AE:0A:50:9E
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0197BA7D196B624E8AD3178AA75CB56BC6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0E65
Signing time: Sun 29 Jun 2025 07:00:50 +0000
Manifest this update: Sun 29 Jun 2025 07:00:50 +0000
Manifest next update: Mon 30 Jun 2025 07:00:50 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: dAzr59529nA5unDr58MOY9pyaPxzOxPqXx2ccBYUu2M=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:19:6b:62:4e:8a:d3:17:8a:a7:5c:b5:6b:c6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jun 29 07:00:50 2025 GMT
Not After : Jun 30 07:00:50 2025 GMT
Subject: CN=8c85b53a26f893931f7d43a8473d268dae0a509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:6c:d9:df:5f:9d:dd:94:1a:b1:aa:f5:b5:
10:74:a2:5b:40:ed:d0:9d:07:7d:9a:d8:63:da:ad:
b1:e2:63:e6:9d:f5:f1:1d:68:9f:2e:86:e3:11:5e:
53:bf:b0:75:5e:4f:44:2a:8a:87:f0:5d:5a:9e:20:
b2:71:29:68:39:f9:e0:c2:85:bc:ba:31:f7:69:85:
e2:cb:d8:f8:59:b0:48:2c:11:d7:ad:cc:7e:6b:ba:
56:a0:2a:26:87:fd:08:20:34:a0:5c:e5:32:b7:2d:
04:7a:d0:10:8e:e5:8b:f8:30:9b:88:5a:2f:31:6d:
ad:bc:c0:89:26:ca:40:fd:f4:b5:1c:83:d4:29:3c:
85:5e:0b:f2:c4:6b:ac:05:39:fa:b8:cf:22:40:1d:
f8:99:21:8e:d7:e5:ac:d1:75:80:20:7e:ab:07:53:
9b:cf:a3:6e:7a:76:d0:87:27:9c:89:d4:11:12:37:
80:be:fd:0f:fb:09:8c:e7:4a:72:65:31:d4:76:1c:
2a:7c:9a:cb:13:9a:95:7a:45:ad:0b:bd:4a:07:70:
de:d1:c6:e4:ef:76:93:09:fb:59:6f:4c:bf:32:a6:
6d:ad:1c:19:40:9d:04:f5:4e:27:81:37:5b:f4:6a:
b7:c5:c8:1e:fe:9a:88:05:cb:19:10:a8:a4:3e:b5:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:B5:3A:26:F8:93:93:1F:7D:43:A8:47:3D:26:8D:AE:0A:50:9E
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1c:fe:f0:34:48:b2:c5:a7:76:ac:eb:f2:e8:39:b2:dd:b6:
85:b1:20:43:f5:2b:51:dd:46:75:3b:3d:17:93:d6:12:77:d2:
63:a1:8a:ea:b1:43:45:4f:c0:eb:c5:83:b4:a4:92:bf:e8:fb:
33:5f:b1:db:01:53:7d:90:0a:9f:1b:17:7e:69:de:20:66:56:
5e:24:2a:c1:d2:28:e8:b8:45:60:d2:a8:a1:2e:1e:66:71:ba:
85:60:60:08:df:3f:54:f8:2d:ea:5f:7c:e9:d4:89:6e:f2:e9:
b7:d4:d7:c4:55:7b:4c:12:77:bf:52:f6:e4:b1:da:a5:dc:fe:
23:ab:ce:fb:ee:78:14:bb:bb:7f:49:6d:cc:8f:fc:83:95:85:
9f:fb:70:5c:48:24:52:fa:8d:41:f8:db:a7:5a:85:76:a1:31:
24:fc:57:73:31:0e:f7:53:79:09:25:19:42:52:12:7d:27:1e:
0a:41:c7:fd:f0:86:7b:bc:21:b3:a8:c0:ae:a6:83:a4:a1:d4:
30:24:d6:62:54:c4:06:9c:c9:ec:3a:2a:73:b7:2d:0a:77:c3:
14:b7:5d:46:03:7f:e1:f9:6c:76:37:8a:8b:2d:54:1a:39:e9:
02:ff:49:14:c8:4f:da:e4:83:e6:76:bc:2a:be:b6:9f:36:5b:
39:11:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:24 2025 by rpki-client