Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: v1L1VdImZXkW1/qUSbm0J6mrbW7T1/MNVpYseHOI1do=
Subject key identifier: 39:8D:80:18:BB:B0:15:D5:51:B1:87:BD:58:EE:50:8A:07:36:A1:08
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 01984BC138882C661E93C021C02E60D74087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:00:10 +0000
Manifest this update: Sun 27 Jul 2025 12:00:10 +0000
Manifest next update: Mon 28 Jul 2025 12:00:10 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 3Qz8FfEjafIcFDNIG+D3cOKUDJKW8KvCwVXQU1DpgjE=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:38:88:2c:66:1e:93:c0:21:c0:2e:60:d7:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Jul 27 12:00:10 2025 GMT
Not After : Jul 28 12:00:10 2025 GMT
Subject: CN=398d8018bbb015d551b187bd58ee508a0736a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:85:4c:63:30:1f:7f:f5:4a:e2:48:ad:85:
7c:f0:a7:76:df:66:a4:ca:62:13:a5:16:c7:07:0f:
b6:c4:b1:6e:47:45:cc:21:e2:06:42:53:8f:84:bd:
02:fa:d3:21:3a:da:dd:4f:bf:06:4b:28:0f:a5:bb:
7d:89:13:58:2c:1b:2f:33:18:36:49:5a:c1:78:76:
bb:0a:4e:1b:18:8c:19:c9:24:84:67:f7:a5:9a:0e:
12:79:65:5b:82:74:43:d4:31:ad:a8:4b:a7:9a:7f:
41:f7:6f:58:02:33:12:1c:11:67:de:ed:39:bc:2e:
18:e6:34:95:24:bc:53:c3:7c:aa:f2:d6:1f:ab:d0:
8b:3c:55:bd:b7:66:4b:8b:83:66:c2:24:28:5f:a5:
32:95:3e:5e:fd:2b:cc:ee:d9:95:a0:73:dc:b0:7e:
88:0c:73:0a:8d:e1:48:ee:e6:a1:6d:34:69:b1:64:
fc:04:81:12:09:ce:8a:31:6d:75:b3:d4:ab:b1:ec:
6c:9e:a4:ff:0e:ee:46:f8:f8:4d:fd:bb:37:75:b5:
28:43:a0:ca:cf:95:4a:6f:b2:ce:5e:64:9a:29:e1:
f6:9b:0b:f7:85:fc:9c:64:c6:12:e8:95:a0:9c:c3:
f7:1d:8f:1b:f2:4c:a2:32:c8:b3:d3:1d:38:cf:76:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:80:18:BB:B0:15:D5:51:B1:87:BD:58:EE:50:8A:07:36:A1:08
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d4:e3:5d:96:93:7f:d9:09:39:ed:5a:6a:9d:7c:73:6f:f2:
83:19:c9:9d:be:31:43:96:8e:9d:d8:9e:69:59:f0:3c:6a:3f:
90:4e:b9:90:f1:d5:0b:00:3d:98:c1:6f:f5:25:0c:39:4d:35:
9b:bb:9a:9c:f5:16:74:7f:11:8e:26:d9:41:ff:66:ac:a3:63:
0d:41:79:0e:74:f1:be:bc:cc:9f:69:70:b9:c2:b4:0a:c8:02:
83:a4:e3:94:68:31:06:70:a1:00:67:4b:16:40:d0:a5:77:12:
b0:9f:08:f5:2a:c2:ce:e1:1f:9f:10:c3:58:f7:29:2f:33:24:
ee:a0:2d:6c:89:b0:fe:bd:55:af:02:24:72:e9:e0:88:fc:af:
00:15:27:cc:c2:73:dd:d5:18:69:e7:27:4c:8b:7d:ea:20:14:
d3:e0:36:30:ec:80:c4:b1:d3:ca:b4:7e:9e:be:f2:8e:dc:e7:
3b:0c:33:d8:a2:bf:61:c8:a3:9e:96:55:3d:86:c5:c2:60:2c:
b1:ed:fd:6c:53:96:e5:d8:8b:b6:d7:ae:b0:a8:d9:83:4e:22:
a4:78:9c:7c:87:f3:5a:a8:56:30:38:34:0b:de:a7:01:6f:66:
e7:95:7c:6b:55:d8:00:34:39:76:45:b2:84:91:e5:4e:c3:54:
43:ba:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:39 2025 by rpki-client