Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: SMFjm2nuRlvxKhBw7zlYlwbIQYke3JTHgiAerhP+Hl4=
Subject key identifier: C2:1F:27:6E:42:F3:3D:81:61:17:B9:36:28:F3:02:D1:71:B1:21:4F
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019853B240CF3D9A582C276E987150AE22A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0156
Signing time: Tue 29 Jul 2025 01:00:47 +0000
Manifest this update: Tue 29 Jul 2025 01:00:47 +0000
Manifest next update: Wed 30 Jul 2025 01:00:47 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: mtzRO+20NF8ik596rlGmIc8/tpDno4PlzAFfk/rqRhA=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:40:cf:3d:9a:58:2c:27:6e:98:71:50:ae:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Jul 29 01:00:47 2025 GMT
Not After : Jul 30 01:00:47 2025 GMT
Subject: CN=c21f276e42f33d816117b93628f302d171b1214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:2c:5e:65:ad:9f:d9:4c:6d:f4:d5:37:cf:
e5:30:1d:77:27:0b:83:33:ae:fb:7a:16:be:78:02:
80:97:28:3c:0f:75:78:b5:9f:26:23:a3:c6:0d:59:
c7:f1:f3:79:40:ee:7d:e8:df:0f:2a:f0:b6:5c:66:
2b:ce:a8:e1:fc:d0:bc:11:ab:4c:33:85:7e:cc:34:
49:e2:d8:1f:89:86:65:2a:5a:14:b2:8b:fb:94:ff:
62:6c:35:0a:4d:82:ee:30:f7:14:f7:e3:7f:47:84:
c9:b2:75:52:0f:65:74:19:cf:8a:78:e6:e7:0d:f7:
6a:ae:e2:9c:73:d9:43:cf:32:8f:6e:d6:18:bc:3b:
b1:fe:56:1c:c1:bc:25:88:21:a5:a4:0e:2e:97:b5:
11:e5:a0:7d:21:de:50:2b:bf:4d:97:9a:d8:77:15:
0c:ce:c4:28:5f:6b:67:db:a2:18:41:95:78:c9:1d:
8c:d6:f1:0a:b2:d2:b3:c4:d9:58:28:90:b3:41:c4:
28:c9:95:2f:2a:9d:5e:c2:7d:6a:60:ae:54:fc:7c:
9b:9b:05:13:d5:98:f3:ae:ab:71:c4:e8:b0:58:64:
ac:b4:f5:4c:e5:b2:3c:65:31:16:50:a5:8e:30:02:
6a:70:29:51:78:3d:a1:2d:af:ec:6c:d9:47:ca:94:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:27:6E:42:F3:3D:81:61:17:B9:36:28:F3:02:D1:71:B1:21:4F
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:0c:f0:44:5e:e1:f0:28:6c:e6:6a:7f:c4:ea:f8:b3:62:
27:ac:d0:a9:c0:96:22:c4:44:63:5f:e6:19:1b:3c:44:27:3c:
82:88:fe:88:66:39:ad:0c:07:31:ca:18:53:13:5b:20:76:cd:
99:d8:2e:3c:21:27:cc:8a:98:74:a8:05:a6:03:1b:6c:8f:ce:
e6:29:0f:da:b1:9c:60:18:e6:9d:36:0b:14:82:b3:33:d3:d3:
d0:db:8d:e1:45:62:f5:29:17:9a:31:14:2f:ed:73:7c:ab:c7:
33:71:b0:f7:d8:c9:27:26:b7:d3:01:01:af:bd:ac:62:79:e0:
f5:6b:87:3f:10:c6:b6:ce:f2:2b:e2:dc:90:99:bb:e0:55:e5:
8a:c3:4c:01:6f:cc:6c:d0:17:a4:4c:d4:1d:ed:f7:14:57:29:
91:02:29:75:e6:b3:3a:a1:4c:05:db:69:c7:a3:cd:05:5c:92:
73:80:ed:06:56:ea:c9:cf:58:9b:24:ea:24:e7:65:9d:41:9e:
08:bf:12:ea:c7:93:23:2a:4e:69:ca:80:b3:71:45:5c:7b:4b:
60:77:f9:ba:b6:09:8d:2c:f7:33:bc:54:c9:ef:7f:bd:e0:84:
9f:b8:ce:70:b0:91:42:45:3a:d9:b1:3c:78:4e:ff:eb:dd:ec:
8e:b7:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:57 2025 by rpki-client