Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: XAxKfJdw89q2F4Le2MyGIlbV4UEnXQ9r1SRzlPLoHlw=
Subject key identifier: C9:65:A1:F8:36:12:A5:68:5E:91:3E:12:32:F5:37:C9:EE:65:9E:D2
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019849669428D8BAC60349A98AA7CDAACACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 9F
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: NL4YB3Qqsks9SDDVjPCH+5v7pfqlWt6jIIiRRyT5fHw=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:94:28:d8:ba:c6:03:49:a9:8a:a7:cd:aa:ca:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=c965a1f83612a5685e913e1232f537c9ee659ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:f1:5c:e6:0a:df:f0:eb:46:3f:6c:16:fe:
fe:88:49:0a:f0:33:fe:63:f1:c3:ba:c7:a0:c4:dd:
a9:27:f9:df:66:95:b4:e3:f3:e4:be:02:25:b0:57:
4e:74:87:73:87:2a:63:b4:11:2f:3e:e6:49:d5:30:
25:ec:3b:22:7b:2e:29:b6:89:20:2c:f7:35:00:aa:
34:61:48:03:bf:7c:66:d5:3f:7f:0b:47:6d:ce:d7:
6b:20:3e:da:f1:ec:bd:37:fc:7c:91:40:6d:65:16:
37:bc:73:66:9f:6b:de:9f:05:76:ca:4c:81:1d:1e:
1b:75:c4:dc:06:b3:42:ed:74:83:71:31:00:b9:24:
d7:50:46:6f:ae:66:73:8d:10:54:d2:cb:25:b8:fa:
15:72:0a:cb:fa:6c:5d:12:41:9f:1a:60:9d:a4:42:
51:e1:65:92:1a:d8:63:32:ac:cc:1f:01:43:17:77:
ba:99:dd:26:5a:7a:98:6e:4e:d0:52:10:30:1f:cf:
f6:64:06:6d:5c:0c:43:53:69:e9:8a:eb:98:87:2e:
33:13:8e:e6:01:5a:7a:f5:61:8d:69:0a:1b:eb:7b:
f0:55:85:a3:5b:07:43:e7:db:38:29:5d:e4:ca:99:
d2:55:67:d1:bc:b6:2a:e4:17:88:19:ea:d3:08:fe:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:A1:F8:36:12:A5:68:5E:91:3E:12:32:F5:37:C9:EE:65:9E:D2
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:77:65:db:b8:cc:9e:3a:fb:93:36:1e:18:d4:90:31:07:6f:
ea:29:2c:e5:3a:94:4e:6f:3e:cf:af:7e:5b:53:d1:cd:f8:50:
b7:a9:aa:0a:b2:3f:8c:d0:25:38:25:0f:b2:92:55:c9:64:5f:
0c:f2:29:06:4c:10:f6:38:cd:ec:d4:da:7c:d2:1a:53:04:4f:
0d:b6:96:5d:a0:35:e5:b8:80:df:e2:3b:d9:05:1f:62:0b:0d:
e7:98:f2:bb:18:37:91:3b:28:f4:70:29:88:ef:0f:c0:ef:85:
79:7c:dd:45:d5:30:1f:e4:e6:3a:70:03:79:21:af:74:47:b9:
b5:01:fd:dd:b4:63:e6:ad:a3:4f:ad:07:7f:15:aa:1c:9d:49:
1c:57:f7:23:de:74:e1:7c:cc:9f:a3:c1:18:e4:53:f9:e8:f1:
f5:9f:3b:21:75:ee:ed:2b:96:36:5e:ee:4a:c7:63:9e:df:0b:
ff:df:da:58:ff:11:60:74:d3:52:b9:7b:e6:68:90:7c:82:ea:
9a:32:a7:ff:56:0f:19:16:61:eb:f0:ae:83:d8:ab:1a:16:15:
5f:e1:89:d1:e7:26:eb:8b:f4:ff:15:52:cb:0a:46:25:c0:13:
25:11:af:e8:9b:c3:ba:12:6e:b6:2e:e4:f0:be:89:d6:48:65:
40:9d:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:25 2025 by rpki-client