Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: 2EwnlsCexvhc5gcnYYfEQqmwc94qCIqg3XQarjcTcUo=
Subject key identifier: D0:C9:92:44:9B:A8:AC:C7:40:15:68:25:6F:D8:79:B6:4D:9F:C0:EE
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 0198274756244820BD66533C82B7223A6F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: E8
Signing time: Sun 20 Jul 2025 10:00:43 +0000
Manifest this update: Sun 20 Jul 2025 10:00:43 +0000
Manifest next update: Mon 21 Jul 2025 10:00:43 +0000
Files and hashes: 1: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
2: BNA4ARff29zCBfR6242MtTb6TGg.roa (hash: tJrTcm7xH3ApI498oc2nbD1Dbkv2EhPah1ZZUS9A5bs=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: 1fs0dWu0GX7f2hrxC67P64U3G+q115F74tPvc8ew5ak=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:56:24:48:20:bd:66:53:3c:82:b7:22:3a:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Jul 20 10:00:43 2025 GMT
Not After : Jul 21 10:00:43 2025 GMT
Subject: CN=d0c992449ba8acc7401568256fd879b64d9fc0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:33:e3:f0:44:8d:aa:30:67:ba:a6:e7:ba:
7d:00:78:75:7e:87:63:79:af:c5:ff:e6:87:ff:c5:
f5:08:2f:d1:d4:a0:54:63:a7:77:40:4c:0b:ab:9a:
ae:db:65:c8:07:55:95:59:27:de:22:c4:90:8c:0f:
f0:bb:84:34:38:88:99:63:89:ce:e2:eb:c4:05:99:
e1:59:56:dc:88:14:6e:89:98:02:08:5b:6a:fc:94:
36:53:a6:aa:22:82:b0:39:e0:60:86:13:84:81:25:
a7:7d:74:f5:9a:c8:bc:11:fb:78:7e:27:b7:70:c7:
4d:f0:f7:d1:98:65:3b:14:31:09:0c:a6:36:74:34:
10:0d:0e:99:ce:64:58:90:e1:8e:c7:0f:5c:59:81:
99:2c:7b:60:ba:45:01:c7:bb:97:c3:bf:80:dc:ca:
75:ba:34:d0:10:5f:ee:0e:34:45:f3:34:e5:20:85:
60:46:e0:65:03:69:66:3e:5a:9d:8e:b0:97:ae:c4:
52:7d:50:4e:a5:e0:5b:50:51:a4:a2:ad:29:ac:c9:
ca:9f:86:f7:b8:f9:d2:a7:2e:1f:fd:6c:21:93:18:
26:b0:2e:fb:11:26:7a:73:b3:f0:03:31:39:ad:2c:
e7:d7:02:29:ec:84:e1:b4:59:9d:46:6e:37:c2:87:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:92:44:9B:A8:AC:C7:40:15:68:25:6F:D8:79:B6:4D:9F:C0:EE
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fd:f6:3a:36:f8:71:b8:8e:6b:72:2d:16:7d:05:67:cc:3c:
f3:d5:75:73:b3:76:d8:ba:dc:d0:af:0b:a1:e8:f8:e7:31:7f:
fb:cc:c4:ed:e2:84:2d:b7:92:72:e1:7c:7b:bb:fe:51:7c:6b:
b8:f5:ba:b9:75:d3:df:7a:1c:76:fe:eb:00:72:20:9b:50:a6:
8b:ce:d5:3d:46:57:34:b7:1d:23:2d:1f:cf:fd:9f:d4:b1:b2:
a8:7b:81:8e:77:79:ee:7d:43:44:06:e5:22:ec:48:b3:0c:8c:
8b:a7:60:ff:e8:cf:ee:e6:14:99:ec:d2:06:56:76:26:07:54:
0a:c4:cd:8c:63:cd:f0:a4:72:3c:35:bd:8c:3d:38:d6:f6:e2:
3b:78:a9:a1:26:24:13:b9:27:1b:2c:96:df:4a:c7:70:51:3a:
2b:e5:06:9c:5a:2e:78:33:17:5f:cd:57:84:60:19:38:a0:8d:
b4:b8:a5:89:ba:67:aa:52:ab:99:84:15:11:67:5c:33:26:b6:
32:50:3d:48:f4:8b:de:46:45:db:9f:d7:5f:80:cf:2b:d7:53:
ae:d2:d0:68:51:6d:74:e0:af:8f:0a:15:9c:ef:da:32:08:86:
16:2c:73:99:83:f4:ab:d9:a2:c1:9a:58:c5:89:82:f1:20:e9:
71:69:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:40:38 2025 by rpki-client