Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: 0ZFtvuPXVz0MdmXnwEtbcxhnLjSXDALsmA50sM3A9LQ=
Subject key identifier: 12:7D:A5:1B:23:F7:05:B4:2C:24:94:72:56:83:BB:5D:15:D1:9E:16
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 01984BC1240D97DF6362E232FC56C933286D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0C1E
Signing time: Sun 27 Jul 2025 12:00:05 +0000
Manifest this update: Sun 27 Jul 2025 12:00:05 +0000
Manifest next update: Mon 28 Jul 2025 12:00:05 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: rICOnXJoJIXCaWVrBU1lekz1n/6U2Wqnd1bJ4dzpVqA=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:24:0d:97:df:63:62:e2:32:fc:56:c9:33:28:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Jul 27 12:00:05 2025 GMT
Not After : Jul 28 12:00:05 2025 GMT
Subject: CN=127da51b23f705b42c2494725683bb5d15d19e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:f3:d0:6c:50:ad:3d:39:8a:44:38:2b:cd:
87:a1:00:c1:af:45:08:35:28:4f:f1:54:de:9c:a9:
62:ba:75:ac:bf:3d:a3:b2:fd:34:b0:c1:3e:39:ca:
60:f6:d5:7f:83:d2:58:18:dd:f0:6f:a7:b5:ac:18:
a4:ed:64:44:30:68:d0:22:d5:0e:2d:5e:35:65:ff:
81:c6:3e:0b:eb:03:fa:82:b5:82:bb:7a:52:e7:98:
2a:92:5e:78:6d:7d:9c:b1:4d:75:dc:cb:48:2e:6c:
05:0c:70:98:9f:c1:bd:b6:96:57:ca:0f:3a:be:97:
d5:78:9e:36:8d:e0:a8:a3:09:ef:af:c9:fe:ee:cf:
b7:d0:6c:b7:ad:a7:31:91:23:cf:6e:27:af:bf:d2:
49:ff:47:3f:1d:89:e9:2f:5e:53:bf:6e:c2:8b:b6:
1d:74:17:6e:3a:c5:c8:3c:b4:ac:c6:99:dd:96:ef:
0e:ef:7b:ae:cf:3b:66:74:71:d6:5b:a5:8a:8c:fe:
48:af:28:f1:b2:27:f3:ba:84:d0:3d:bc:12:8a:13:
d2:ad:f8:d7:53:18:92:09:c4:0d:98:09:12:a6:f6:
79:12:66:86:79:16:79:43:e7:3c:3f:9f:37:38:ca:
ef:8d:15:0f:01:b9:44:02:f0:90:43:bd:28:43:76:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:A5:1B:23:F7:05:B4:2C:24:94:72:56:83:BB:5D:15:D1:9E:16
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d1:94:97:66:25:81:95:8c:a1:ed:5b:a1:b3:eb:19:09:b1:
e1:f9:0b:63:0b:e4:83:22:96:fa:8e:e8:90:b1:b7:95:81:49:
00:a3:50:5c:79:f5:96:d4:a8:f7:31:0d:56:ba:1a:b7:dd:bb:
36:68:7e:c8:0b:ec:ac:a0:60:fd:7e:b7:21:f7:1d:ae:46:4a:
5f:65:cf:31:fb:79:54:1e:58:c5:c1:5f:10:39:b5:db:3a:3a:
8d:c7:d9:3c:6d:80:c6:87:b8:f7:e6:03:14:1d:43:fa:f7:51:
e4:15:ab:dc:52:b3:b3:dc:ea:d1:12:a1:e3:37:21:61:25:15:
08:04:81:4e:7f:fb:86:26:6a:68:56:a4:31:9b:6b:3d:dd:eb:
48:9a:c4:f6:2d:c9:9d:61:5c:20:d6:53:85:bf:db:ee:50:f6:
df:06:92:17:32:55:51:83:5a:a4:1c:6c:1f:30:2f:a6:ec:57:
2a:d5:a3:2e:38:97:6a:82:11:83:e2:f7:f8:4e:f7:48:c2:23:
55:1e:71:cc:24:30:79:af:55:0d:5a:bd:37:ec:a9:ab:79:d1:
92:c8:7b:49:cb:73:dd:6e:89:7c:a7:68:8e:b6:ef:ad:55:53:
6e:6d:4b:a9:f1:8b:2b:6a:b3:3e:46:5d:85:d9:f0:ca:5c:56:
e3:c0:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:32:31 2025 by rpki-client