Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: bk62RadduM0FV3u7HCPyrA85qe9Krb7e8TgojDeYnvE=
Subject key identifier: E6:B9:50:A2:3F:C9:6D:FC:A7:6E:3E:5F:7A:0A:E6:F1:E3:7B:DD:6C
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 01984966806DB3DA06065A9A29B846F4A0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 15C3
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: qUc151cwV6AE/rIFmeFcSOG+b+kSFmEeXmFg9nlrmuQ=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:80:6d:b3:da:06:06:5a:9a:29:b8:46:f4:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=e6b950a23fc96dfca76e3e5f7a0ae6f1e37bdd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:1f:c0:a0:52:ac:9c:c2:d2:96:a9:89:aa:
c9:c5:94:cd:bb:d7:ad:dc:7a:ac:97:a3:a8:db:31:
dc:38:03:ec:c0:a4:fd:71:38:58:aa:29:e2:5a:9d:
b5:05:95:f0:d1:a9:b2:6c:ab:bf:67:ac:16:e0:9d:
bc:ea:14:eb:a8:6a:bd:00:cb:18:9b:04:34:05:cb:
3e:a4:c2:75:b5:d2:9b:3e:dd:aa:76:f9:5b:6c:f7:
2e:4f:a2:fe:25:ed:34:6c:e5:fe:90:fd:d5:e7:56:
eb:e2:68:56:15:81:db:7d:d1:21:68:39:45:bb:37:
fd:30:07:a0:7a:a2:37:aa:c9:3f:1e:c6:92:f9:8e:
6a:05:6e:d7:8a:ad:17:42:d9:45:28:e7:68:4b:d6:
be:6f:a1:c1:8f:b9:ac:b6:7a:c5:6c:11:5e:cb:12:
58:ab:de:ba:92:ac:84:28:b9:b7:23:9b:a2:b8:c4:
89:1d:7c:5d:59:00:87:46:29:b5:d9:91:84:e7:41:
28:3c:69:92:35:a9:fd:c4:af:d4:29:e6:c9:b4:46:
88:45:01:9e:16:16:aa:6d:07:cf:8a:6f:c6:e7:5f:
ce:7c:47:25:8a:95:c8:e7:f5:8c:c8:b1:43:cd:92:
21:b6:35:dc:f2:ef:0e:fa:6a:d2:b1:a3:9f:d9:6a:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:50:A2:3F:C9:6D:FC:A7:6E:3E:5F:7A:0A:E6:F1:E3:7B:DD:6C
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:90:39:98:44:df:d7:94:d2:7a:61:a5:fd:4f:f4:95:45:
76:44:6c:9d:30:41:83:b6:e9:ae:12:f3:22:60:10:0f:ad:ba:
a3:82:f6:2b:a6:84:21:1c:85:f9:73:98:61:1f:9f:c5:b9:af:
1a:35:c3:c2:cb:a3:ae:4e:4a:94:d1:f5:b4:dd:cd:51:72:9e:
cd:2f:41:cb:a5:15:a8:5a:c2:1d:ae:df:31:c0:57:d5:b0:fc:
96:89:81:a1:68:09:89:b4:6d:74:e3:d8:4d:56:84:31:5f:a5:
56:7f:d9:ab:df:b1:cb:7a:98:4e:6e:aa:05:86:93:59:1f:a0:
b7:4e:1f:06:d7:24:62:f4:cc:7f:fe:57:a9:cc:a6:48:68:a7:
64:3a:9a:29:ff:be:c8:3b:14:b9:da:5a:e9:db:92:31:ff:4f:
ad:e8:8f:b8:17:bf:cb:36:d5:49:f6:0a:92:5b:95:51:7b:9a:
6c:92:cd:e2:14:b4:b4:e1:68:cf:ae:af:db:56:75:f8:df:5e:
72:c9:f2:21:8f:b8:52:68:13:3c:58:0b:83:ee:34:83:a1:d8:
2f:70:0d:a4:55:d9:eb:98:8c:06:a7:51:c0:f4:b0:9c:88:2c:
c1:f5:fe:27:29:b0:94:07:be:80:b3:bb:82:07:41:ff:51:19:
1d:5a:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:54 2025 by rpki-client