Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: oEgUauBhuAuibMjoOJe4wR9uArtZ5Jh2yKrsoVYWZeA=
Subject key identifier: 26:DE:1D:CF:96:AF:06:9E:E0:8A:0E:3F:7C:F4:CA:41:BF:47:8A:0B
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01984B54B6F11280EF937FBAEE2232EF9885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:01:39 +0000
Manifest this update: Sun 27 Jul 2025 10:01:39 +0000
Manifest next update: Mon 28 Jul 2025 10:01:39 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: RW818xE/+9s/Qb2Tmu0hapL7ZB9afcIMiwem3S2+lus=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:b6:f1:12:80:ef:93:7f:ba:ee:22:32:ef:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jul 27 10:01:39 2025 GMT
Not After : Jul 28 10:01:39 2025 GMT
Subject: CN=26de1dcf96af069ee08a0e3f7cf4ca41bf478a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:95:ce:eb:42:92:65:7d:79:3c:6d:eb:3f:
7d:70:fa:29:91:ae:99:de:93:e1:35:38:ee:d2:4d:
27:9c:1c:ae:ce:d8:6e:3c:b3:62:56:4a:81:9d:0b:
5f:f9:5f:b0:31:da:e1:6c:ca:e3:aa:cd:d4:0c:3b:
6b:10:55:49:12:9b:3f:59:20:89:03:57:e0:d7:92:
22:b4:6c:ff:ba:3a:c7:ef:61:d8:4f:a5:23:50:30:
70:5a:3e:38:3f:88:01:be:ac:b2:f9:a2:d5:95:6f:
85:dd:2a:a7:56:d0:41:7a:0b:6f:1e:be:fd:d8:b6:
8a:c4:e0:21:8e:85:0d:a2:10:9a:9e:8c:fc:45:ae:
09:10:4e:5d:81:7a:c2:4b:98:98:fb:f8:41:dc:a4:
1b:ef:30:66:1b:81:07:4a:f5:fa:0b:6e:18:4d:b9:
a9:fe:76:eb:99:ae:6b:b4:33:5a:27:94:e6:0f:f6:
4b:aa:f2:b8:28:01:e0:10:33:26:bf:02:3d:45:42:
e8:ef:18:e5:cc:da:f2:f2:fc:d0:37:2d:3e:64:a8:
9c:88:9a:c0:7c:c4:41:2f:6c:d6:2f:b7:23:f0:db:
57:c0:5e:0f:eb:18:1f:0d:1f:e9:63:88:f4:a1:05:
1a:f8:ee:2a:da:6b:f6:d3:98:5c:81:57:10:8c:96:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:1D:CF:96:AF:06:9E:E0:8A:0E:3F:7C:F4:CA:41:BF:47:8A:0B
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8e:28:da:df:d3:f0:b9:e5:c3:6d:a4:c7:60:1c:56:d4:85:
55:d8:60:5b:af:69:9f:5c:82:8b:36:b0:31:71:07:51:d2:ac:
55:28:e2:b4:04:86:37:78:5c:e7:0d:10:df:c1:01:0c:24:8a:
61:d3:84:11:6e:bc:bf:dc:e8:89:60:5f:d7:d9:e1:fa:a5:b3:
e1:e0:bc:20:af:1a:73:8f:32:69:2d:84:7e:23:07:27:99:e7:
f3:45:3b:d4:18:50:7e:15:cb:c1:c9:0d:d8:e2:16:9b:b1:17:
20:fb:6e:ae:18:9f:9c:84:3e:58:6c:bb:33:25:f3:8a:84:f5:
0f:26:71:09:a2:a7:73:73:9d:bf:f8:8f:88:02:35:4c:7f:fa:
b1:d2:2a:1b:47:b8:2a:0a:da:c6:0b:f3:bd:2f:fa:01:b9:8f:
7b:cd:59:e8:81:29:c4:09:58:bf:0d:d5:27:95:29:5f:e6:d0:
14:48:01:f2:0c:d7:fa:7d:34:60:19:03:6f:80:c4:9a:90:73:
72:7d:29:5d:8f:ef:1f:8a:04:2b:e8:32:a0:4f:f8:86:98:3f:
6d:3d:6b:f1:c1:12:a3:25:f5:43:09:9e:47:90:4e:bd:07:39:
79:60:3e:74:49:bb:07:f7:58:02:5c:62:5a:7a:be:ac:02:ab:
80:77:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:57:24 2025 by rpki-client