Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: /CCA71dF1Cg9F8yibrxTylhodPI4Ub5bmJSwuVfqu3o=
Subject key identifier: 0C:9C:5D:1E:BE:03:D7:06:3A:BD:7B:BD:8E:BD:EF:35:3D:9E:CB:7B
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 01984AAEC1BC5FFA4BB83991AC1A43D9C45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: yKcCsmGOGxrHCSctx/6ZLEe1oFFUaOpP+Qr57fvVjBE=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c1:bc:5f:fa:4b:b8:39:91:ac:1a:43:d9:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=0c9c5d1ebe03d7063abd7bbd8ebdef353d9ecb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:d0:1e:43:bf:20:83:4a:c0:b6:77:93:e3:
dd:42:0a:b1:2c:81:e9:13:89:79:b5:11:99:34:26:
2b:a7:67:fe:0c:ef:c7:9b:fb:0d:e3:bf:95:e8:67:
72:24:01:52:37:fb:88:c0:88:30:26:13:ac:87:08:
f5:2f:2d:2f:84:ae:62:e1:30:8c:72:fa:35:c3:2d:
7a:eb:01:54:7d:cb:c3:d7:7a:6b:0d:2e:fe:f3:cb:
09:e4:0f:58:dd:56:86:1e:25:f0:2b:eb:66:37:6f:
7b:52:b1:25:f9:ef:87:5d:fd:6b:c8:96:b8:3a:c6:
5c:a6:8c:63:7d:55:98:00:5e:14:a3:e9:69:4e:a4:
5f:0d:7d:ac:26:d1:e6:23:8e:a9:fd:43:8d:1e:55:
7c:07:1c:c7:18:45:c9:79:e4:3c:8c:02:07:a3:7a:
e3:33:db:42:1d:22:8f:6c:1f:8d:62:b4:19:d9:f7:
31:17:df:12:3e:1e:20:0f:dc:7a:d4:d4:0b:40:26:
30:b9:e7:52:c3:2c:fc:85:3c:d7:f7:ca:fc:47:ae:
4d:35:28:36:74:62:ee:96:10:b3:52:b2:fc:05:43:
d0:86:4f:fb:be:49:81:6d:b9:be:e0:53:a6:7e:1d:
ac:0b:c6:fa:79:df:fa:84:0f:0a:01:8b:46:ac:bd:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:5D:1E:BE:03:D7:06:3A:BD:7B:BD:8E:BD:EF:35:3D:9E:CB:7B
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:aa:1f:15:fb:ec:82:82:34:96:4a:ca:35:d6:16:7e:17:fd:
d7:a8:9d:86:7d:3e:0f:df:96:c6:f7:e8:b8:ff:21:9b:44:96:
52:45:dc:61:70:e1:78:63:85:6c:8e:d3:86:d8:e6:fb:44:40:
8d:59:b9:da:aa:af:5d:5c:a3:9f:6b:bc:97:1b:78:45:26:2e:
66:cb:a4:c1:ca:b1:ed:39:d8:35:0d:2c:42:5f:52:17:31:bb:
24:e5:20:64:99:71:6e:55:67:5a:d4:d5:6e:43:07:a3:aa:88:
ef:03:7f:fa:40:04:f4:81:a3:60:9b:e0:66:ea:7a:ac:39:10:
69:70:cd:1d:98:0a:64:a1:e5:0f:14:bf:18:2b:87:82:9b:ca:
a7:93:7d:aa:aa:69:dd:ac:71:e8:08:27:5b:f5:64:d5:7e:cc:
b5:d2:81:51:9e:c1:19:a7:6c:22:7f:2a:02:88:e8:6a:cf:b2:
f1:fa:6f:88:26:f0:a5:c6:9b:bb:17:ab:d5:b9:fb:18:69:f0:
14:14:92:37:4d:73:bd:58:52:ec:75:bd:52:df:a3:8b:2d:d2:
72:5f:28:bc:bb:bb:8e:d2:ee:a0:55:2b:45:ac:12:0d:cf:8b:
94:2b:46:1c:67:e5:19:0b:b6:d8:f4:cb:1f:ca:57:35:d5:d8:
15:9d:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:20:43 2025 by rpki-client