Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: yEdet95d5pZB08zN+L51p3kaPE3UktOmWwjc3vtl77o=
Subject key identifier: 2B:8D:C9:03:68:E0:55:12:5B:ED:B9:BD:49:7F:48:B0:B0:96:26:50
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 0199221EFDD49987A39EF148D7D60C1FE051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 037A
Signing time: Sun 07 Sep 2025 03:01:20 +0000
Manifest this update: Sun 07 Sep 2025 03:01:20 +0000
Manifest next update: Mon 08 Sep 2025 03:01:20 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: Tf/QKAUoiMXqy3BqwHyZv1oEfrIU8ulFok45LMpY0L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fd:d4:99:87:a3:9e:f1:48:d7:d6:0c:1f:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Sep 7 03:01:20 2025 GMT
Not After : Sep 8 03:01:20 2025 GMT
Subject: CN=2b8dc90368e055125bedb9bd497f48b0b0962650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:21:b5:ee:5b:69:52:d8:4b:58:74:bc:3c:
cd:05:af:f1:ec:cb:fd:7a:01:75:bb:58:b0:e1:8b:
bb:a8:aa:31:d3:01:a6:d0:08:fc:7f:d6:25:eb:f8:
65:69:18:4f:ed:71:49:1e:d1:ad:67:3c:d4:7a:ff:
f7:08:ca:64:37:bf:b4:0d:58:0e:55:e9:ac:e3:8b:
75:4c:95:33:21:e2:31:c0:42:d4:32:85:d9:98:2f:
55:6d:16:36:98:73:17:d2:fb:93:00:e1:a7:b6:d7:
f3:5e:d6:53:d9:fc:e9:fd:1e:51:97:9b:c0:17:7b:
8e:f7:6f:70:ba:2f:af:e7:7d:43:62:bd:56:68:a9:
de:af:e3:c9:7c:d3:50:b8:3a:a8:37:29:34:80:ab:
c4:87:bb:c3:61:28:d4:bd:bb:90:cf:e1:2e:02:07:
03:d9:68:72:6e:4b:03:5d:69:08:1d:85:eb:66:b4:
53:97:2c:02:3d:91:2b:67:a9:98:29:7a:ca:3a:e4:
5c:6a:fd:84:0a:d2:88:6d:93:bc:ad:cd:d5:5b:b8:
12:f4:a1:42:b8:b4:29:95:be:a6:5f:1e:8e:1e:42:
7e:04:3d:37:a4:f8:d6:dd:9b:a9:e4:58:66:98:82:
49:1c:a2:ef:ce:03:27:6f:6d:9b:d0:cf:4d:40:dc:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:C9:03:68:E0:55:12:5B:ED:B9:BD:49:7F:48:B0:B0:96:26:50
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:56:d2:ee:20:2d:bb:b5:70:5a:d6:0f:aa:7a:d7:c3:0a:
2b:79:5e:dd:e8:eb:0c:a1:30:e8:87:4e:ea:2f:d2:9c:49:28:
08:dc:d5:47:e6:39:a7:42:d8:50:9e:d8:87:9b:f5:1e:2f:fe:
b9:4b:8e:64:2e:9d:36:be:a3:70:bc:c2:44:9d:e5:26:ac:15:
24:61:cf:0a:07:7c:86:81:a7:87:6e:60:94:c1:5a:fb:c9:7b:
34:c4:2c:40:34:19:46:75:41:54:59:aa:78:bd:29:0d:da:cd:
b5:ff:70:c3:06:d0:b7:9e:39:47:79:9e:4b:77:1c:69:8a:9e:
3a:c3:96:08:d6:78:0a:e6:ac:ee:4f:76:74:50:a1:66:f7:cd:
79:94:73:c6:b4:ca:b7:35:00:0b:13:3d:0e:1f:91:4c:cd:35:
18:6d:93:88:9e:22:b4:49:99:fa:47:7a:90:08:65:72:73:d7:
2b:bf:61:67:64:ec:8d:83:81:62:37:96:9f:0d:ef:73:52:8f:
6f:1f:5e:83:37:54:f7:fa:ac:ba:29:56:8b:93:5a:3e:80:a8:
9d:13:94:93:1d:b8:ab:58:93:47:a6:6c:fa:76:01:ef:63:63:
a1:50:a4:af:16:64:05:82:d9:a0:d3:0d:06:f8:6a:de:2f:06:
c0:12:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client