Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: S7XYxnW0wtOdJ3ygKsdNf/Q4n1uYRsnZRN/TWCxOYjA=
Subject key identifier: FF:F9:04:2F:96:53:55:C0:23:13:47:35:83:3C:CB:C1:0F:E4:2C:BA
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 019848C071730B05EDFCC18E1A21CF4E6131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 22:00:28 +0000
Manifest this update: Sat 26 Jul 2025 22:00:28 +0000
Manifest next update: Sun 27 Jul 2025 22:00:28 +0000
Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: PocBmTGZfVddNMXmY+H/VRI6S9WJIseCRW0g86ww2es=)
2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:71:73:0b:05:ed:fc:c1:8e:1a:21:cf:4e:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Jul 26 22:00:28 2025 GMT
Not After : Jul 27 22:00:28 2025 GMT
Subject: CN=fff9042f965355c023134735833ccbc10fe42cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d8:5b:67:28:40:13:c3:12:ab:a1:b4:bf:9d:
2d:c4:f5:c1:c3:d5:e3:a6:d8:c8:a7:14:20:8f:65:
dd:05:23:2d:f4:06:06:f8:b7:0e:e8:41:57:c1:6e:
a7:18:0c:72:80:c1:ae:e9:08:ad:91:ed:04:c5:52:
34:d1:d2:ef:74:49:c3:2a:2a:34:da:32:c8:2e:83:
c7:18:80:39:73:f0:c3:a6:b6:b4:c7:b7:52:51:83:
ed:84:ae:53:7c:e3:b2:61:85:be:94:40:e8:03:4a:
db:89:5f:70:95:08:a6:00:52:13:6a:84:0c:40:0d:
01:a8:83:b3:05:3a:9c:a0:58:96:6b:9d:89:d7:fa:
b9:da:84:3a:62:52:48:1f:96:36:4b:33:43:72:23:
85:9f:fb:7e:58:7f:9a:d9:f8:02:57:a0:08:58:ac:
68:7d:06:49:01:d8:66:71:15:37:3f:8a:fe:14:db:
1a:f8:a8:8d:e2:d8:35:fd:51:8b:a7:ef:79:4b:50:
3d:ac:11:77:41:af:52:51:a1:53:1a:ee:5d:70:51:
5a:16:2f:53:e1:12:13:11:ae:50:26:6b:ea:0c:e1:
35:41:e3:70:14:11:85:ac:95:7c:2d:a3:8b:3c:68:
fe:e1:04:28:4c:c4:8d:f7:aa:e5:ae:38:bd:46:d0:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:04:2F:96:53:55:C0:23:13:47:35:83:3C:CB:C1:0F:E4:2C:BA
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:90:db:d6:bd:7e:f1:41:ca:83:e2:b9:5f:de:c7:c4:05:87:
f9:71:f0:63:a8:ab:ed:23:35:bf:f4:14:75:65:ac:31:87:29:
4d:0e:ed:58:3a:e2:5d:bb:e1:94:cd:5e:6a:37:db:2c:a7:64:
83:8a:e1:b0:c6:cf:6c:a9:ae:13:e1:9a:b2:66:06:c4:8f:e5:
5c:4b:1b:df:f0:b5:97:22:0b:92:ef:35:f0:6c:aa:70:64:7a:
99:9d:25:79:4e:25:ba:1d:32:3d:95:8d:5a:2f:88:c5:ca:45:
77:4f:7d:30:1c:e1:50:80:79:a8:7f:a6:47:95:c3:c7:e4:42:
f6:b4:09:d9:03:b4:f1:6f:1e:b1:b4:cc:69:ba:30:3f:85:5e:
94:bc:23:75:be:33:f0:3e:10:c2:da:56:09:28:2c:fb:73:67:
ec:26:60:fb:3a:c1:a2:ad:78:d6:7f:62:eb:70:b6:0f:bf:3d:
91:f3:23:8c:c4:d1:7a:83:eb:da:3b:08:71:38:b2:86:66:5d:
2f:ed:be:31:28:09:7f:55:9d:f0:2e:d7:77:40:53:f9:ef:5b:
dd:3d:be:f9:87:a8:6a:b4:19:98:4c:d0:e2:a5:fe:03:e6:b3:
94:f2:d8:de:cf:18:ef:3b:0b:8c:de:2f:f0:a4:d3:c2:43:89:
6c:a5:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:49:18 2025 by rpki-client