Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: F+lH2Ogfx+CMomup28IHodZmno+tTVNrbHBQwXNvJr8=
Subject key identifier: 5F:A8:42:DF:E1:75:B7:1C:E5:C3:F6:BA:15:36:09:3D:02:92:A3:DE
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 01984AE5DFE32711B0B300F47AD2286BF740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 08:00:35 +0000
Manifest this update: Sun 27 Jul 2025 08:00:35 +0000
Manifest next update: Mon 28 Jul 2025 08:00:35 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: K1EpZMkGs2iFrMSpwa6ZZuR+wprZW3slashA8W2HL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:df:e3:27:11:b0:b3:00:f4:7a:d2:28:6b:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Jul 27 08:00:35 2025 GMT
Not After : Jul 28 08:00:35 2025 GMT
Subject: CN=5fa842dfe175b71ce5c3f6ba1536093d0292a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:cf:f5:1e:d4:85:a5:89:7a:db:1e:71:1f:
d7:3a:d8:16:bc:c3:67:c5:81:99:f3:0a:d5:d2:7a:
76:11:7b:d4:3e:5b:c8:d2:44:5a:bf:62:e0:e3:dd:
6a:ed:6f:f3:ac:ac:fc:32:16:77:45:85:fc:33:6e:
39:71:c8:d6:5b:8f:58:35:20:0c:9a:62:e0:9c:f5:
76:d8:85:0c:7e:cd:fd:25:98:89:49:1f:06:cd:1d:
f1:b7:93:54:60:4a:83:06:d6:22:bc:82:81:36:d7:
5b:5e:4f:d5:f7:9d:ba:2b:5c:84:66:64:b5:a9:fb:
59:82:50:7e:b0:4f:93:e6:2b:9a:03:62:63:ad:91:
d6:5a:69:93:82:79:db:4d:59:c1:cb:f8:05:23:a6:
bf:2d:29:cc:cc:b7:b3:1a:6c:67:c4:c8:db:9c:ea:
8c:d6:af:89:d6:01:a1:7c:01:48:3b:43:cf:5a:09:
a6:a0:fd:2c:c0:d3:5f:85:f6:70:c5:eb:c5:ec:51:
88:aa:ed:5a:d7:8d:1e:ee:c6:7b:c6:1f:a3:c1:4e:
19:9e:82:23:4b:6e:5a:54:f6:ca:85:61:fb:10:8d:
dc:e4:f4:8a:ff:a4:75:47:e8:8e:44:9c:09:12:00:
87:4e:93:6c:90:3e:d6:33:8d:2a:37:29:8c:4d:b6:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:42:DF:E1:75:B7:1C:E5:C3:F6:BA:15:36:09:3D:02:92:A3:DE
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:d4:bb:5c:2a:7c:84:2f:93:a3:93:9c:44:38:54:1d:1b:0b:
e2:d1:5a:0b:11:93:4b:d0:57:28:dc:08:4d:ad:16:7b:7e:96:
9d:1c:c3:4a:61:4a:8a:09:da:9d:38:27:07:fd:16:4d:03:86:
5a:e9:80:a5:0d:81:f3:c0:27:4a:42:c9:09:84:c1:6f:24:a5:
88:60:59:ee:03:8f:34:43:57:3e:5a:0b:1a:d4:e6:f5:c0:85:
8f:ed:e4:57:13:e9:68:05:13:4b:7b:20:e0:e2:2d:ab:bf:bb:
a0:55:22:8f:05:1a:1c:99:2c:4c:1c:e3:06:b1:46:2d:39:1c:
e8:4d:94:54:ab:86:37:f3:c8:a4:97:5d:bd:69:10:43:16:76:
8e:88:54:f5:09:0a:2d:3c:e2:3d:ae:f1:6f:57:d1:28:d2:0c:
a7:dc:eb:b7:bc:74:7d:28:cb:16:ab:de:4d:71:a8:fa:9f:a7:
c5:60:af:d8:58:71:75:4c:66:d6:d9:e0:69:7c:b2:f1:bc:15:
8d:e3:30:38:90:37:cc:da:d4:e1:d7:05:b5:1f:3d:b0:77:bb:
0c:a7:ea:ac:8c:64:8d:66:24:de:f9:f4:9a:3c:2f:9c:3c:ef:
56:e5:61:38:f8:b1:cc:b4:90:4d:0e:32:86:38:68:2e:0c:2b:
c3:24:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:34 2025 by rpki-client