Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: KURVXRkT9Sqm2k0LJ9ThfohbgGKVXWyHo/Vrk/qfZpA=
Subject key identifier: B9:28:D3:6A:9C:1F:7F:E0:AB:F0:E4:5C:E5:A5:02:10:43:90:F9:F0
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0198368373CE09D31F0450D993DB9B2E7C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 10EA
Signing time: Wed 23 Jul 2025 09:00:41 +0000
Manifest this update: Wed 23 Jul 2025 09:00:41 +0000
Manifest next update: Thu 24 Jul 2025 09:00:41 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: +CLAhP9ev3MNVvjZAZorqdsylyeXFPYQ7C8IagDSkPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:83:73:ce:09:d3:1f:04:50:d9:93:db:9b:2e:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jul 23 09:00:41 2025 GMT
Not After : Jul 24 09:00:41 2025 GMT
Subject: CN=b928d36a9c1f7fe0abf0e45ce5a502104390f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:e3:a1:4d:b4:5c:f9:f9:fe:93:de:b0:47:
0f:3c:c8:bd:1a:8e:c4:6a:f1:49:d2:f7:e2:53:a2:
3d:52:d3:fc:df:62:98:70:5f:c8:af:d9:89:ac:21:
83:d2:c1:ca:e9:6f:0c:33:b2:2d:32:44:07:28:3e:
4c:0f:21:49:ce:ff:91:cf:08:55:07:cd:53:fa:00:
b2:f0:27:30:2e:9b:b4:77:9b:2a:e9:18:df:2e:0a:
e0:8a:9e:08:8c:06:48:7b:5a:34:6f:df:f3:75:7c:
52:4a:96:99:a7:1b:6f:be:f4:82:92:1f:3d:23:e0:
a4:1f:55:bf:a2:c3:bb:be:91:4f:b7:be:53:2a:a7:
58:ce:c9:19:11:00:77:24:64:2a:7b:07:58:ea:92:
3b:13:d9:70:7b:92:af:0e:d7:58:25:78:b7:fb:95:
20:aa:e0:b2:68:a1:05:2c:87:a4:46:04:da:36:d4:
b6:ba:98:f3:f8:94:6d:cc:b6:bb:99:57:c0:7a:7d:
b9:e0:5d:11:e0:74:81:a6:55:b2:18:69:2b:cc:c2:
7f:84:52:27:78:bc:f9:c3:2e:b5:03:80:92:31:da:
e0:87:14:7a:79:46:21:3c:d8:00:93:41:8d:3f:1a:
ba:d5:64:1e:d8:6f:8e:84:21:b3:47:c0:99:88:f5:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:D3:6A:9C:1F:7F:E0:AB:F0:E4:5C:E5:A5:02:10:43:90:F9:F0
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:2e:8f:11:c3:1d:1e:b2:71:eb:e8:14:51:7d:98:45:ac:
c1:64:10:93:e0:d7:27:53:8a:85:70:b7:b5:12:b1:45:3d:6c:
ac:f2:5b:70:fe:6c:33:48:a6:b0:38:78:7b:bb:c5:31:cf:45:
0e:8e:03:a0:55:fa:2a:ff:d1:11:a3:47:bc:3c:8e:ba:fe:cf:
04:6b:f5:af:24:1b:1a:88:de:9d:0a:dc:e9:80:b0:af:9f:72:
d8:17:a6:f0:58:c8:be:aa:32:c0:23:1e:93:d0:e7:d2:71:a1:
0f:15:4f:5c:16:f6:08:2a:b5:df:7b:50:9d:12:f9:cd:b5:6c:
38:82:e3:d9:5e:38:f7:5c:9e:84:ad:88:b2:5a:70:da:2a:b7:
85:79:6c:19:4b:7f:88:06:8c:a3:8e:c1:37:1c:03:92:80:3b:
e8:0f:b2:45:cc:e3:b9:c5:cd:62:ed:1a:14:c8:a5:53:d9:c2:
48:23:fc:b0:23:cd:5c:93:b4:07:ba:80:df:02:30:45:86:b6:
3d:e1:5c:57:ee:a1:91:45:09:6e:ad:2e:90:e2:f2:35:34:e6:
1e:e8:43:c1:f7:5e:99:b8:95:96:d8:2b:1e:09:11:5e:f0:eb:
da:da:ca:cd:25:be:49:18:39:c5:1a:62:d7:dd:31:66:7a:81:
a3:a2:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:41 2025 by rpki-client