Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: YSHF37EGICfY8H/sNwKv6JcFfw8utyo8EnBRwBTlvig=
Subject key identifier: 57:0A:48:65:5C:06:EF:66:62:AC:A0:5D:A9:B4:DE:CF:5D:19:2C:C8
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 019847093E62F39F658D18369AB6BC09EA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 0283
Signing time: Sat 26 Jul 2025 14:00:44 +0000
Manifest this update: Sat 26 Jul 2025 14:00:44 +0000
Manifest next update: Sun 27 Jul 2025 14:00:44 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: UDiOdEE7QXe07hSjU4US4v2iPYQAk/+QHKjV36UR68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:3e:62:f3:9f:65:8d:18:36:9a:b6:bc:09:ea:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Jul 26 14:00:44 2025 GMT
Not After : Jul 27 14:00:44 2025 GMT
Subject: CN=570a48655c06ef6662aca05da9b4decf5d192cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:e2:29:f3:9f:9b:22:2e:ee:0a:04:6e:c0:
47:c5:3b:cf:fc:be:e6:b9:23:1f:1d:2c:41:d5:ba:
49:3d:1d:49:46:65:e6:6e:d3:97:93:ce:5f:80:d6:
b4:9a:63:74:23:0e:b3:ad:12:32:6c:98:8e:aa:01:
e5:7b:53:07:7b:eb:29:85:fd:96:02:57:b9:0f:8c:
dd:90:ea:14:53:84:62:85:d5:61:4c:f8:62:af:5c:
49:ba:1a:3d:a8:8f:2e:ec:73:84:36:17:2f:fc:2a:
17:e4:da:5e:ad:ff:45:cd:c5:50:d5:5d:f2:9e:2a:
d1:c3:ce:0b:1f:de:e1:fb:0a:35:16:b0:43:de:eb:
13:36:94:83:d6:04:40:f7:a4:60:0c:01:6f:ef:9e:
08:32:c1:f2:ae:d5:30:38:6a:d9:bd:3a:c0:aa:8f:
7d:91:e5:e2:f7:d0:99:c8:3b:aa:ad:18:aa:6d:65:
29:0f:d3:01:a1:e9:58:d6:c8:ed:40:e3:92:2b:bb:
cf:14:9f:4f:f0:fd:23:8a:9f:c9:d5:02:7a:ba:e0:
87:87:1f:74:c6:a1:38:04:23:d2:a1:6a:69:22:ae:
5f:9f:76:4f:7a:96:d6:7b:54:67:4e:92:67:5d:b7:
ea:43:5b:58:c2:b4:9b:f3:b0:66:84:5f:70:4d:44:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:48:65:5C:06:EF:66:62:AC:A0:5D:A9:B4:DE:CF:5D:19:2C:C8
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:91:db:77:a2:f3:13:ec:25:20:99:ff:45:5e:b2:0e:ad:
b8:3d:b9:1c:9b:cd:3b:4b:2e:cd:68:09:2e:53:7b:b1:14:b4:
c1:64:90:d6:48:67:3a:30:27:d4:c2:dc:16:6b:23:d8:65:a9:
26:87:32:c2:a0:30:08:70:90:64:0a:f3:0d:8a:58:2a:fc:71:
ff:17:4d:01:bc:c1:88:ae:00:f7:67:75:40:71:2e:4d:02:63:
45:3a:a6:a4:48:02:0f:72:e7:f2:e9:97:91:c1:46:28:9d:8b:
55:a9:9a:2f:51:5e:6d:14:f6:a6:07:1f:81:ec:04:bd:d0:21:
50:47:f6:42:50:84:6f:6e:bb:fa:d5:92:7e:a5:3c:94:36:32:
b6:7c:a9:64:f1:70:f4:a3:dd:de:26:98:e8:a8:82:f9:e6:20:
9e:22:34:0b:b9:e3:e4:9b:91:f1:50:58:de:b6:a1:c1:08:7a:
43:f5:aa:c6:cd:46:35:e4:09:b0:83:90:80:b6:f3:c1:de:88:
6f:59:f6:fc:e5:75:e7:c7:53:be:8d:47:8a:a1:ba:bd:2d:4e:
a1:18:a7:9f:4e:ee:6d:c0:3a:d1:49:86:bf:74:10:dc:7f:46:
92:e8:76:63:91:70:e7:4e:99:79:5a:92:c9:6e:12:e0:71:cf:
46:0e:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:16:24 2025 by rpki-client