Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: JuENvk/yxjeUXbPN/m+2Cdwm76fcaOKrO7NH9W9JKzo=
Subject key identifier: 93:24:24:E3:75:32:67:17:62:A3:B4:45:FE:0B:C4:02:8C:8C:8B:26
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 01984A410B021A6997736538C6EFC1C77CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 05:00:33 +0000
Manifest this update: Sun 27 Jul 2025 05:00:33 +0000
Manifest next update: Mon 28 Jul 2025 05:00:33 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: zShJqw+smhcXR63Qmdygax+O2Geixfvs3kxJav689p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0b:02:1a:69:97:73:65:38:c6:ef:c1:c7:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jul 27 05:00:33 2025 GMT
Not After : Jul 28 05:00:33 2025 GMT
Subject: CN=932424e37532671762a3b445fe0bc4028c8c8b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:41:32:03:64:98:b0:c4:19:f1:80:9c:f1:
bd:e8:33:01:35:57:e8:c7:21:6d:5b:d5:4c:6b:eb:
44:ee:59:e3:22:c9:66:37:6d:60:09:b6:77:4d:52:
0a:e2:b9:07:71:96:c8:e8:9e:d5:c5:fc:47:92:5b:
d6:bd:71:05:67:cc:65:29:20:17:a2:b3:53:97:f6:
9d:86:7f:e9:a7:77:ae:61:e7:13:be:1e:05:ce:bd:
86:25:49:a2:38:e9:94:60:7f:18:78:65:3b:85:a5:
7b:b1:c1:f1:e8:39:c8:74:44:32:9b:63:fc:96:9f:
7d:99:97:83:0a:75:a4:cb:e2:36:2b:30:94:f0:c8:
7e:27:55:3d:c9:37:64:a5:5e:d6:8d:ab:a8:bb:0d:
ea:5e:0e:f6:ef:22:65:2f:c5:2f:a2:08:be:a8:5e:
e7:c7:77:98:ab:93:26:e4:5e:c3:61:29:ae:65:1b:
59:af:51:61:0d:e3:2f:81:94:92:5c:87:25:40:cb:
89:c6:93:18:1e:f4:af:82:f3:7b:90:99:3d:77:da:
4f:b2:e0:ef:4c:0d:20:78:75:e9:d3:96:7a:71:ea:
25:fd:ad:fb:49:24:5d:7a:4c:40:c7:ab:51:f2:8a:
ee:64:e2:a7:40:12:ad:e3:42:02:cd:02:fe:ab:93:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:24:E3:75:32:67:17:62:A3:B4:45:FE:0B:C4:02:8C:8C:8B:26
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:d5:ec:7e:55:b7:5e:96:c5:ab:2c:f7:ef:71:37:a0:4c:
8f:d5:f4:26:07:34:0d:2a:b3:7f:82:e8:50:68:74:64:b6:a9:
de:e1:ce:47:45:28:b6:7a:c2:d5:e9:e4:0d:a6:e0:37:e6:d9:
91:86:06:5a:f2:56:9d:4f:99:06:58:d8:de:99:09:64:2e:df:
ac:49:80:6e:17:06:92:77:95:e9:61:32:23:18:a9:54:50:b6:
59:73:78:d1:5e:be:3c:ae:9b:8d:76:72:a9:ed:0c:19:4a:e1:
c8:9e:17:90:7f:8a:0b:e7:75:b6:72:7a:b5:7f:fa:6d:17:43:
5d:e7:10:f4:3e:2d:23:03:d2:ff:05:05:d2:33:94:7f:5b:06:
51:55:3a:cf:7a:58:64:fb:0b:f0:39:cd:ac:81:7e:bf:b5:7f:
4f:0b:12:bd:fb:77:2d:c3:f4:27:fc:8c:03:dc:43:38:b5:28:
41:90:c1:34:70:85:ea:a5:8c:2e:78:9e:66:e2:36:8f:63:3e:
81:d0:f3:2d:5a:68:03:97:08:12:2b:b3:75:e8:7b:8a:48:a2:
21:5c:99:99:11:a7:a7:eb:8f:d3:96:dd:cf:34:f9:01:f5:0d:
72:6d:eb:b6:5f:cb:76:b2:ff:ee:b0:44:2a:aa:eb:aa:08:56:
73:fa:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:48 2025 by rpki-client