Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier: cngmAY99u5kNRfjefT87B3vd3IeqZDRWH3LKQ43ygAc=
Subject key identifier: C2:DE:DA:37:74:05:14:D4:C8:53:02:8D:5C:69:92:79:6B:4C:A1:E9
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 019849650EBB7C673C70E98FBEDE99C72FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number: 1557
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: 3zDFBuq7b4NtgAG2O0BEn9u6zYHtQTnHelVUodEALHw=)
2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0e:bb:7c:67:3c:70:e9:8f:be:de:99:c7:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=c2deda37740514d4c853028d5c6992796b4ca1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:60:0b:ea:ec:2b:01:38:6e:c7:31:0e:80:
df:a5:7f:8e:7b:1e:ad:68:62:9a:34:b0:aa:bc:82:
95:ce:58:86:b5:f4:3e:e3:af:84:74:9b:02:4d:0b:
d1:66:5a:ab:cc:9b:5a:6c:50:b3:c9:40:e4:51:a7:
02:40:9f:7c:27:4f:a6:58:5c:d8:0f:83:83:a1:b3:
89:d5:2b:b4:d4:da:18:0b:28:46:1a:74:47:95:c9:
85:b4:d0:c5:39:3c:39:6f:29:71:a9:fa:67:39:09:
a1:d1:d5:f1:0b:6a:ca:dc:53:35:4e:ad:7f:92:36:
23:f0:11:4d:18:43:9c:58:d8:79:03:bd:b6:22:6e:
34:d3:d8:3c:f8:7e:a1:b2:77:bd:42:9b:fd:3f:96:
ae:ae:d9:e8:37:fa:49:4d:37:21:22:10:2b:69:17:
be:20:72:e0:39:c8:39:71:9a:9d:da:21:e8:b1:49:
b3:f5:fe:02:d4:f5:70:a0:d5:73:45:99:b4:c4:ef:
e3:a3:08:99:47:07:5a:10:3b:e7:59:d8:9c:bd:c5:
1b:0e:48:1d:9b:7a:a2:e2:54:d0:9c:3c:34:ca:0a:
f2:a3:2a:3b:49:71:b2:60:2d:a8:e9:6d:2b:45:a0:
3d:5f:b6:d8:27:73:41:54:34:0e:d8:87:92:c6:3f:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:DA:37:74:05:14:D4:C8:53:02:8D:5C:69:92:79:6B:4C:A1:E9
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:f8:9b:05:fe:91:37:b2:99:b5:b1:53:03:a4:68:66:f3:
9b:f0:33:f1:8c:60:e2:45:ec:a0:c7:2e:49:17:f5:83:3d:76:
f2:db:00:79:7e:07:6c:13:7f:66:79:f7:62:ce:12:b8:9f:67:
a1:01:35:8f:77:00:3f:cc:1a:db:39:2a:19:f4:a3:cf:d4:63:
94:20:7c:44:d4:b5:af:35:6b:0d:68:1b:de:17:ac:a1:a3:b8:
d8:2a:81:75:3a:50:dd:92:92:cf:9b:0c:8c:42:7e:fa:44:69:
79:0a:e0:c9:01:23:3f:41:88:ab:a8:8a:ff:f7:73:04:39:63:
85:6f:63:d2:75:bc:14:b4:68:d7:52:9b:ec:43:b5:45:11:a3:
31:a5:0b:15:17:15:e2:ff:1a:c4:31:60:16:77:40:fa:bf:82:
3f:75:b1:31:a4:27:d0:31:d8:a9:98:98:5e:fc:41:c1:ab:5b:
3b:bd:88:b4:41:c4:91:29:0e:1a:7b:14:45:72:6d:e2:44:cf:
37:02:0c:f3:7b:50:d9:28:fb:15:a6:c4:31:3a:f9:f5:e6:47:
63:81:02:8f:16:fa:1f:a1:5e:37:19:cb:92:7c:b7:3a:8d:b6:
8b:a6:72:f6:5e:68:74:a0:f8:12:cf:84:88:11:d0:ff:00:40:
02:e5:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:46 2025 by rpki-client