Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: LQxro9ld8oOwSJxeCHRleDhSIkpx+/If0Bpj5HzSDD8=
Subject key identifier: ED:D6:AD:74:C4:50:19:2C:91:06:4E:72:64:D8:A4:0F:6B:F5:5A:FC
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019846D1E59C7D01F8A0F87B910AD5F1A829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 13:00:17 +0000
Manifest this update: Sat 26 Jul 2025 13:00:17 +0000
Manifest next update: Sun 27 Jul 2025 13:00:17 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: hmD6V1AJSKjxSQ5YOcjYw4/8W2DJEy29p01+Ii7a7Ro=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:e5:9c:7d:01:f8:a0:f8:7b:91:0a:d5:f1:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jul 26 13:00:17 2025 GMT
Not After : Jul 27 13:00:17 2025 GMT
Subject: CN=edd6ad74c450192c91064e7264d8a40f6bf55afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:cb:d8:55:81:7d:79:b8:01:f8:b9:a9:56:
79:10:85:96:63:09:81:5e:d0:eb:20:05:fc:5f:fe:
91:ef:3e:fa:46:e1:82:3f:bf:e2:56:99:bc:53:a3:
7b:cf:19:ed:b3:26:c4:96:a8:9b:1c:c2:e3:48:c8:
f6:8f:a7:30:02:df:10:68:c1:a5:11:96:b1:dd:ff:
92:8d:f3:34:2f:6d:71:7b:5a:f5:79:90:48:0a:ee:
59:a3:12:d4:81:2d:02:44:dd:28:f5:20:cb:ce:b5:
e8:d6:6e:70:82:d8:3b:fe:76:bf:a9:f0:5a:02:69:
30:56:82:fa:9e:c2:96:43:12:52:cd:6b:56:07:66:
62:e3:90:a7:2e:53:4b:65:71:f8:d1:b0:d5:0c:d1:
f3:46:8b:c6:90:be:71:c9:40:89:5f:ee:07:de:25:
22:3b:0e:6e:27:e8:d9:b5:59:54:72:04:6f:59:a3:
37:b5:47:49:78:90:4d:f6:13:32:90:a4:08:05:83:
92:83:a6:15:a8:58:64:4e:b8:b2:24:90:e9:37:c7:
77:5b:9b:96:b7:13:0d:2b:42:cc:4f:3d:d6:b3:99:
67:69:72:53:ab:ed:2a:48:03:b3:48:0d:2a:1c:cd:
8a:66:0c:e1:40:78:7a:60:90:39:1a:c0:a5:75:e1:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:AD:74:C4:50:19:2C:91:06:4E:72:64:D8:A4:0F:6B:F5:5A:FC
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cc:bc:2f:25:ab:73:e2:69:44:fc:62:4b:74:14:cf:fe:19:
43:f3:59:87:16:19:98:8c:00:96:42:ca:4c:2e:18:3e:18:07:
7c:e0:ae:c0:02:51:45:78:21:04:79:9a:4d:1f:a2:35:e0:c7:
5a:96:86:56:0d:11:d0:87:b5:9a:a7:aa:70:bc:d3:83:dc:64:
33:de:33:0e:d8:ad:d5:80:75:a9:48:0c:4b:30:31:db:c9:ba:
c9:ee:ac:e6:39:9a:a9:c7:f8:a3:a1:f8:34:8c:5a:6f:4a:23:
fe:fe:f9:b9:24:b9:65:5b:b8:8a:de:7a:4e:47:20:25:50:21:
2e:1a:00:26:24:b2:25:97:59:a7:b3:23:fa:71:9f:e0:67:83:
dc:e7:4c:d2:21:c0:0e:1d:fb:00:ae:2e:ad:89:19:48:f0:a6:
c2:f3:14:2c:50:90:93:30:0c:50:d2:23:c5:5d:bc:ad:d1:d1:
42:6e:ca:d8:fb:8e:2e:79:f4:b0:15:06:5b:26:42:a9:29:9b:
b0:b3:f2:c4:98:22:6f:48:04:2c:16:3d:ef:79:52:a6:31:01:
8e:69:dc:1f:b7:7c:c0:4b:f4:2f:20:5f:73:4f:16:d9:5e:e1:
a9:2c:4a:49:04:82:6d:16:02:d0:b7:52:6d:06:20:cc:27:70:
89:4d:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:59:05 2025 by rpki-client