Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: CfHGuvCGCNcJTPJn1DR9MpGNBFRX8+YfJZO97qPW06g=
Subject key identifier: E2:D7:68:E7:55:FB:57:59:27:FE:60:B4:4E:64:66:EC:C0:C7:EE:83
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0198499C323EE24B4B1F271A3A0A091943EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 02:00:29 +0000
Manifest this update: Sun 27 Jul 2025 02:00:29 +0000
Manifest next update: Mon 28 Jul 2025 02:00:29 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: H1AO+u35kfjIl8l/01IHbozaqwirKOfuqtqEMGpW7nw=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:32:3e:e2:4b:4b:1f:27:1a:3a:0a:09:19:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Jul 27 02:00:29 2025 GMT
Not After : Jul 28 02:00:29 2025 GMT
Subject: CN=e2d768e755fb575927fe60b44e6466ecc0c7ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:70:64:23:d2:8a:55:a9:a3:c6:83:8c:78:
2f:1a:de:56:41:b7:16:e0:3e:e5:49:79:01:e6:bb:
c0:76:ae:b2:49:92:be:89:b6:9e:02:de:be:05:61:
a6:ee:bf:c8:95:2d:a9:e4:bf:8e:50:2f:8e:a2:fd:
b1:40:0b:4c:33:bc:4a:e9:5c:fb:72:c9:8d:a2:03:
00:1d:74:5c:63:ed:ad:43:79:05:ba:b3:12:d4:85:
1d:92:d0:9d:2c:0a:de:80:92:d9:a1:25:15:91:43:
8b:f0:ae:7d:e1:22:08:20:2c:18:f8:54:7f:05:a1:
7e:04:17:8d:80:c1:91:dd:bd:26:06:c2:a1:ae:ce:
b8:d6:66:5f:46:7e:e1:81:d5:3b:5a:20:6e:8d:62:
ad:0c:78:c3:f6:a6:42:5f:8a:f0:10:ae:e9:6e:c1:
19:2d:da:47:e2:81:f3:1c:ad:89:fa:9a:cd:75:c1:
e9:f2:9b:c5:8e:a0:0a:2e:bc:aa:93:49:9a:fa:26:
4d:dd:3b:e0:7d:2e:9f:60:81:c7:81:b3:80:cf:71:
7e:c0:ad:5a:10:91:74:7f:df:2e:e6:8a:a3:71:f3:
55:39:f1:c0:ee:e7:0a:0a:4f:73:64:25:ca:22:d9:
f9:bd:c3:90:67:93:81:d1:27:b2:61:bf:c9:91:26:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:68:E7:55:FB:57:59:27:FE:60:B4:4E:64:66:EC:C0:C7:EE:83
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:89:31:52:56:18:2d:5f:70:58:b3:fc:07:b2:e8:d3:7b:bf:
d0:64:22:84:61:96:f8:e6:fb:4a:36:05:30:51:72:63:09:be:
4d:55:69:4d:7e:ea:3d:d7:37:4a:14:b5:86:d1:c6:9b:08:83:
fe:42:0b:20:89:82:3f:ac:a3:8b:40:93:eb:73:1c:0e:cf:fe:
f9:35:d2:4f:f6:a7:bf:32:70:d9:3f:93:e8:81:df:c1:46:00:
e6:39:cb:b4:f5:fd:83:f0:8c:13:ed:f6:f8:d7:49:8f:18:1f:
ad:41:92:d3:43:d0:22:a0:97:f5:7f:3c:37:b4:ea:b7:76:10:
2f:79:46:65:ec:e3:ce:3c:77:b9:00:3d:14:70:b1:45:57:b1:
4f:f7:12:11:5e:fb:a7:cf:39:b4:e8:61:ad:51:bb:ae:36:9e:
00:16:76:30:d6:56:7d:28:d2:1e:35:eb:0a:a1:f1:66:f5:aa:
73:9b:62:7b:8a:03:6c:15:48:31:3a:c9:b3:f0:5e:6a:a5:87:
3e:5e:c2:2e:ba:0b:fe:39:c3:cf:b5:72:63:ff:9a:69:82:f3:
de:16:e3:e1:45:b3:14:70:b4:c3:ce:cc:b3:5e:49:8b:b8:4f:
d6:94:1b:8a:48:05:32:6d:df:38:ec:df:a7:51:55:ed:23:d3:
a5:7a:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:57 2025 by rpki-client