Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: uEQI2XgcZ0kxyAJyNL7Bq+yJ8Fny0mj4+7+xA6RKkY8=
Subject key identifier: 51:E8:30:69:8A:5C:EB:66:F0:89:31:4B:AF:8E:73:0A:61:BD:2C:5D
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019847ADEA0031160CD0EFF7BE669EF628F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 12E6
Signing time: Sat 26 Jul 2025 17:00:36 +0000
Manifest this update: Sat 26 Jul 2025 17:00:36 +0000
Manifest next update: Sun 27 Jul 2025 17:00:36 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: sBSfxkbC/YdD3W33nOd3CT2Jv6h+HWwWzUZDjmaxOAo=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:ea:00:31:16:0c:d0:ef:f7:be:66:9e:f6:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jul 26 17:00:36 2025 GMT
Not After : Jul 27 17:00:36 2025 GMT
Subject: CN=51e830698a5ceb66f089314baf8e730a61bd2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:c8:13:c9:f5:f4:e3:bc:c7:1f:7a:6a:75:
cd:b7:70:3b:87:3a:be:f1:40:80:59:29:33:9e:02:
34:e9:19:8a:4a:df:60:50:f2:44:5b:12:76:c9:22:
89:e9:3e:3a:41:3b:59:0f:53:a6:21:bc:95:83:1c:
4c:ad:a3:74:84:38:46:a7:20:da:0c:fb:51:78:c8:
9e:c5:fc:5d:5d:8e:4e:a7:81:91:a0:f7:f6:30:3d:
00:ca:26:36:8f:41:e6:03:8e:50:a8:92:8d:ba:e9:
82:0c:59:99:77:97:05:49:ef:9c:a9:b8:f4:67:87:
ac:a4:0f:68:b8:5e:d7:72:84:71:86:72:81:35:43:
f5:6b:45:53:c8:ac:92:d3:32:c3:31:cf:e0:9b:c5:
4b:a7:49:78:8a:d4:04:39:b2:49:67:d8:44:8a:8f:
14:3c:95:c9:cf:12:b1:8a:f9:e9:68:b2:1b:2b:fa:
71:74:53:9f:d9:84:6a:bf:6b:58:29:b7:ac:c5:d6:
c8:4e:b0:9c:34:63:2a:03:02:6e:f3:a3:18:92:74:
c0:fd:7a:38:07:b9:92:c7:7c:c7:fa:62:1d:20:2c:
9a:9f:24:da:d1:0d:8a:79:2d:49:be:84:e0:55:11:
2b:6b:23:eb:3b:e5:14:a4:64:ff:cc:7d:42:ab:b0:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:30:69:8A:5C:EB:66:F0:89:31:4B:AF:8E:73:0A:61:BD:2C:5D
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c8:ff:2e:d3:aa:2a:87:0f:b8:5b:fc:de:b6:3f:b0:8e:7f:
b3:ae:29:b6:e4:ac:1b:35:0c:82:ce:b1:cf:d8:64:6f:41:ac:
cf:ad:ab:52:6e:45:7f:c9:64:22:28:a6:fa:82:2d:b6:9d:d4:
13:f9:23:3c:09:ff:e4:54:a0:1b:fc:75:34:55:12:ef:25:35:
8c:6b:62:8e:e9:90:d1:78:5f:12:b6:80:2d:47:a8:68:54:06:
28:6b:c9:cd:3c:85:53:05:3c:0f:a6:42:23:40:f6:67:23:6d:
11:75:c6:7e:93:8b:74:ee:f2:7a:dd:6b:86:18:a5:86:d4:ac:
90:f7:db:8b:46:b7:70:06:7c:e6:2c:ea:b8:8f:5e:db:75:ee:
b8:19:65:0d:52:44:db:3b:39:c9:cc:e5:ae:9f:77:3c:59:96:
40:6a:60:cb:3a:3c:d8:ba:d9:66:52:b7:8f:92:b5:74:26:35:
f3:7b:1e:c5:2e:4d:2b:e7:14:b1:11:5d:20:83:fc:32:89:d4:
70:0e:95:4b:ad:14:54:2a:b2:bb:ac:d6:06:de:a9:65:cb:15:
66:5e:75:d0:f0:06:e4:4f:5d:d3:19:f2:73:fa:88:56:d4:67:
57:ac:dc:aa:99:03:5d:fb:4e:84:cd:91:13:31:65:e3:61:00:
2e:b8:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:02:23 2025 by rpki-client