Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: 597ihmIKNzfGJQEeBbqgsTeFZ7vWjnw0ugxxae4fTFc=
Subject key identifier: 02:DC:A0:93:C5:63:1B:31:41:DD:2D:02:C4:36:73:6D:8D:C3:59:28
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0198C6ED31F767B0AC7E5C94BE905ACC3510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 01DC
Signing time: Wed 20 Aug 2025 10:01:30 +0000
Manifest this update: Wed 20 Aug 2025 10:01:30 +0000
Manifest next update: Thu 21 Aug 2025 10:01:30 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: Szm2A/cfOR1PL9mWCRTqgQmmH3dRkOHOiK1o28r4/pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:31:f7:67:b0:ac:7e:5c:94:be:90:5a:cc:35:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Aug 20 10:01:30 2025 GMT
Not After : Aug 21 10:01:30 2025 GMT
Subject: CN=02dca093c5631b3141dd2d02c436736d8dc35928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:e8:97:8e:3d:3c:7f:77:d0:a7:e3:17:53:
3d:91:2e:92:b3:ce:4f:09:41:8c:a6:3b:5a:ea:f9:
cd:2a:f8:2d:f0:a5:52:fe:a6:dc:78:6e:3a:d4:e8:
0b:ac:04:60:94:6f:1c:3e:c8:c2:4c:bd:af:19:d0:
ba:60:24:0e:8b:1f:7c:da:00:d7:68:19:72:8c:02:
58:76:2b:9e:ce:7f:32:61:8e:b6:70:ac:95:ff:3e:
59:9a:a8:f4:44:9e:6c:5e:6b:4d:5f:2f:d5:7f:36:
08:0f:f5:ea:74:dc:fb:51:30:92:5a:23:85:7e:6d:
60:0f:af:54:13:5f:c8:be:77:57:f8:5f:17:a3:6d:
30:f2:68:85:70:cc:e9:72:bd:79:ff:ce:20:ad:f6:
be:5d:b6:68:0a:72:63:8d:a5:ff:53:5e:26:14:12:
78:51:ad:58:db:76:78:f6:87:26:8c:28:c7:aa:a0:
29:76:43:89:5b:04:37:a6:cd:c1:55:5b:21:67:82:
5c:39:9f:50:0d:d2:ab:94:61:5b:cd:c3:35:b5:7b:
c6:42:26:ab:55:dd:3b:d4:25:2a:e9:93:d0:d6:e9:
cc:54:ee:6f:f4:96:87:e3:ab:3b:06:b3:a7:9c:e8:
64:85:f3:ae:7d:8c:e4:55:85:1a:df:14:6d:2f:4f:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:A0:93:C5:63:1B:31:41:DD:2D:02:C4:36:73:6D:8D:C3:59:28
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:f6:fc:2d:07:42:78:ca:2d:b0:c3:79:25:e9:33:89:1d:
d1:a6:4e:e1:6c:53:54:ba:b9:09:c3:72:be:4f:d9:39:63:ff:
51:5d:c0:e9:42:5a:86:db:d0:04:a1:84:95:6b:5b:15:08:ab:
8b:88:a2:df:d8:8d:ad:5f:2d:7c:06:5d:51:c2:37:e7:e6:d3:
47:76:9a:92:e5:06:80:8b:ba:c7:49:0e:ad:67:94:5b:1b:bc:
ca:08:68:0d:f9:00:d5:80:53:33:3b:0c:2b:2b:c0:25:3b:af:
c0:93:0c:12:76:51:a0:4b:58:55:ae:cf:57:f3:db:87:3a:3a:
cc:14:a6:aa:c8:0c:97:cd:86:37:8b:b9:08:63:53:ce:5e:77:
f1:bc:21:07:85:f4:64:10:b9:fb:01:c3:50:f6:d2:9d:82:25:
e6:48:d5:5b:35:96:3e:b2:f0:1d:bc:08:2c:f3:e5:80:c4:fc:
9f:23:ae:59:4e:8f:bd:3e:04:4b:b2:37:9d:17:b1:72:fb:c0:
b9:aa:ef:9a:9d:a6:75:ec:3d:19:6b:9c:f4:04:7d:c6:b6:d0:
df:08:91:e6:02:56:dd:e8:17:eb:ea:87:14:bb:77:46:87:01:
36:cb:0a:f1:76:8d:db:13:98:fc:37:68:97:01:3d:14:70:de:
98:d3:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:10 2025 by rpki-client