Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: NDcDhIdWtbLCuHh9O+fUOWI8gouoSOIDUYG/o8M8Onk=
Subject key identifier: 5D:71:A1:A8:BD:01:68:C4:09:07:3A:58:2C:41:5D:A4:47:C6:75:38
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 01984852A3338FD08DC8DB84873CBFBC0C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0273
Signing time: Sat 26 Jul 2025 20:00:31 +0000
Manifest this update: Sat 26 Jul 2025 20:00:31 +0000
Manifest next update: Sun 27 Jul 2025 20:00:31 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: SkqsXdQqt6N0YSBWDcEEpYVE/qeCXxjVxgav4xuBeo0=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a3:33:8f:d0:8d:c8:db:84:87:3c:bf:bc:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Jul 26 20:00:31 2025 GMT
Not After : Jul 27 20:00:31 2025 GMT
Subject: CN=5d71a1a8bd0168c409073a582c415da447c67538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:af:f0:a9:22:aa:8a:79:d1:68:d7:f3:3f:
10:1c:2c:b8:0b:cc:31:1a:81:92:ab:88:be:bf:0b:
97:13:ee:1a:05:37:c9:7b:a5:a5:9f:e1:0d:a9:9d:
43:74:dd:28:e8:07:c1:5f:5d:7a:c1:00:08:22:d6:
83:5b:89:a0:eb:f4:fc:70:87:2a:97:47:fb:55:54:
fe:e1:19:c0:1b:50:26:c4:45:12:8c:5d:31:72:fb:
30:01:3b:2d:64:ec:bd:2c:f7:82:7a:c3:2d:db:67:
96:b0:4e:af:e7:ac:8c:61:49:b2:70:ba:67:8c:97:
23:95:a5:6e:b1:c9:a5:18:47:a7:ae:90:f3:16:5c:
8d:b2:83:5a:2e:e1:dd:c6:1f:3f:7e:85:bb:d1:36:
a1:e0:92:f7:86:ce:f8:51:2b:70:85:bb:ae:52:11:
27:0d:d2:3e:94:78:ad:13:ea:94:03:72:b2:c6:c0:
93:a2:78:47:af:be:80:be:26:10:94:31:8b:2e:32:
bc:df:0a:d3:a7:91:e1:c9:ab:d3:ec:7d:8c:f4:85:
55:a8:49:4c:ea:59:94:cd:82:3b:ee:60:bf:f2:7a:
2f:44:fe:f2:14:72:75:2b:ff:2b:cb:50:eb:74:7f:
13:26:31:c3:49:a0:96:c8:e7:39:11:8b:3f:eb:b8:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:71:A1:A8:BD:01:68:C4:09:07:3A:58:2C:41:5D:A4:47:C6:75:38
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:9e:1c:83:43:9f:0b:e3:4d:32:de:3c:1c:b3:cb:32:ce:
f1:b7:31:64:c3:52:5f:6a:87:a1:a4:c1:f8:44:f1:1d:a6:aa:
06:2b:4b:7d:a7:e0:27:4f:c6:92:6c:3c:5f:54:5f:ce:53:d1:
1a:cd:c4:b0:a1:f7:a8:7b:65:73:b5:46:e1:8f:df:92:94:9e:
17:73:9d:75:02:a8:a4:47:40:79:47:6d:22:1e:ad:e4:7f:c7:
33:d7:14:5b:10:ec:07:b8:0b:fe:23:40:1b:79:67:7e:62:9c:
c7:81:52:e6:9e:41:15:02:c9:36:c8:eb:bc:96:c6:ba:1f:0e:
d4:7f:b6:86:31:2a:bd:e2:d7:36:13:36:b7:d7:32:c3:ca:7e:
a9:a2:3b:d0:85:e9:39:97:79:f0:23:ba:c8:2b:ad:be:78:57:
f9:b1:06:18:81:3e:a9:aa:ba:49:87:b6:3f:23:6a:ac:46:1c:
11:9c:f3:ab:ef:f9:21:37:55:51:80:02:27:59:46:c2:ed:ea:
b5:36:93:43:33:e2:cf:48:b0:45:db:4b:79:72:e5:f2:56:e0:
1c:7b:bf:9f:23:a5:56:18:53:9b:5c:6a:2e:2a:66:6d:31:eb:
59:41:79:d4:fc:a9:2e:fa:23:04:08:b4:ab:2a:2c:fb:b7:70:
91:05:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:30 2025 by rpki-client