Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: 3pGCZV1RBvDRWkUT2hAvmKcT+TKwcBagPDy360dKJnM=
Subject key identifier: 7A:F7:87:59:1B:04:B1:02:EF:DD:C9:AD:54:C1:08:CE:02:70:40:F1
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019836C195DB57D763F4C58E0B7A471B0081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1604
Signing time: Wed 23 Jul 2025 10:08:33 +0000
Manifest this update: Wed 23 Jul 2025 10:08:33 +0000
Manifest next update: Thu 24 Jul 2025 10:08:33 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: KWNedqw670XuTxmvtHYnE5SH7D8.roa (hash: Hgt+nZNfMr/B5igG7xHH3ux4Cc9OLLDDHgH64+CPerA=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: 77tSVRZ2iKAIn0yxsmydMMbmz5tSXZOcCN8bg2kuPCE=)
4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:c1:95:db:57:d7:63:f4:c5:8e:0b:7a:47:1b:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jul 23 10:08:33 2025 GMT
Not After : Jul 24 10:08:33 2025 GMT
Subject: CN=7af787591b04b102efddc9ad54c108ce027040f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:71:96:ed:2a:ea:38:65:2d:14:aa:20:d2:
1f:89:9a:24:47:a2:e3:5a:08:7a:b6:27:b9:c1:ae:
02:3e:4e:2a:6b:8b:15:f0:d1:8a:fd:cc:47:4a:3a:
e7:4f:e6:f2:d5:25:4e:a7:fc:07:b6:74:1c:11:15:
64:9a:f4:0a:37:e1:e0:6b:e6:7c:73:6a:e0:16:d9:
cd:65:0b:0f:54:78:91:8a:db:bf:98:19:8b:cf:12:
01:bd:ba:46:77:dd:1c:b1:0b:78:f3:88:b1:fb:e5:
3c:2f:8b:8f:70:0e:8a:18:8b:75:07:0f:c2:c2:64:
e3:e6:c5:d8:ef:76:0b:77:4e:a4:08:f7:a8:68:05:
38:85:5b:3a:7c:b5:47:8a:24:7a:4d:09:00:ef:e1:
6e:86:da:04:cc:fd:8f:87:14:84:4a:b4:84:d2:ca:
e2:23:f3:40:90:7e:24:7a:a9:27:69:b8:78:e1:6b:
b7:b0:64:55:1a:31:ae:fa:af:97:f3:1f:ce:e8:52:
79:aa:28:96:c9:44:64:ab:9b:74:ab:c4:7a:36:a9:
b9:b5:47:2a:de:6d:9b:49:ff:d3:f0:36:c8:c2:5b:
57:9f:b4:6c:9e:3b:61:a4:88:81:eb:91:65:b8:91:
15:fc:25:43:b9:86:4a:91:66:a6:62:ae:83:ba:0e:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:87:59:1B:04:B1:02:EF:DD:C9:AD:54:C1:08:CE:02:70:40:F1
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:3a:92:68:50:ab:bd:40:6f:00:23:38:c7:42:fd:a5:c2:
27:aa:80:d9:01:2a:0e:30:3b:db:63:19:c9:aa:a3:6d:91:09:
bd:cc:06:26:4c:0e:3c:a3:36:39:06:1c:6d:5e:f0:fd:c4:23:
ef:a9:0d:a2:d6:38:bc:bb:a1:81:9a:e6:e9:7f:f6:b0:dd:4c:
8b:58:52:02:d8:37:70:94:35:47:53:77:10:a0:64:2a:03:10:
d4:19:19:7a:98:e4:1c:d0:56:01:32:08:cf:23:84:5f:ad:da:
20:9c:d6:73:7e:c0:c7:f6:12:00:a7:dc:68:82:b5:fb:e3:0f:
03:3e:0d:a3:00:d5:95:cb:2c:29:31:2b:2f:0f:4c:33:7a:ad:
d9:77:01:12:86:79:db:cc:a2:4c:33:5f:94:01:b6:76:c5:02:
be:e7:f4:bb:a2:a6:e8:81:72:47:05:6d:07:3d:3d:49:80:a3:
01:73:b4:9f:c3:c0:e3:84:9c:15:c8:62:90:0f:61:ce:97:88:
ee:e3:af:5d:92:44:48:6b:02:d1:46:3e:80:2d:aa:e1:36:83:
5a:5b:65:f8:5c:5a:91:ea:4d:65:f6:d2:b0:58:3d:22:62:b3:
f6:17:e4:07:39:25:8f:f9:e0:3f:05:40:c5:3d:65:c0:73:0b:
ad:91:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:09:49 2025 by rpki-client