Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: SRLwBWzPnTJNpv8rJFIFIA5T0K+e8Ivbl/SwggmQlG8=
Subject key identifier: FD:B5:31:1E:E8:ED:13:9C:77:E3:94:EE:62:85:3C:8B:35:2F:86:C4
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 0199172D1A6F28D6407EC36ADE8898F1BB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 00:00:55 +0000
Manifest this update: Fri 05 Sep 2025 00:00:55 +0000
Manifest next update: Sat 06 Sep 2025 00:00:55 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: x53a9mfqZBQQoCn19UOQ1iUql32n0ZtcpslGlzLeto0=)
2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:1a:6f:28:d6:40:7e:c3:6a:de:88:98:f1:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Sep 5 00:00:55 2025 GMT
Not After : Sep 6 00:00:55 2025 GMT
Subject: CN=fdb5311ee8ed139c77e394ee62853c8b352f86c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:47:0f:2d:ba:23:13:ed:2e:7f:f0:d2:a1:
eb:de:39:3a:c2:26:1d:6a:5e:9b:12:aa:23:6d:85:
2f:da:a5:bd:14:e6:e1:5f:61:e3:cb:d1:26:01:fc:
c2:2f:77:d2:04:fa:81:b3:f7:b0:15:1d:7e:6e:58:
27:b6:6c:a0:cb:ba:cb:6b:e9:54:16:bb:56:b1:77:
70:a2:14:d1:d3:60:21:e6:10:c2:01:74:12:d6:ee:
e5:d9:42:27:60:40:ed:c2:84:39:9a:12:13:fc:5c:
b9:3e:7d:95:1c:a6:b3:2f:3f:a1:fa:2d:45:1e:2c:
ca:d6:e0:d6:75:a2:73:a8:b6:fa:7b:bf:79:d5:52:
e6:18:52:be:65:d0:97:b3:19:db:56:b6:72:ec:07:
68:2a:36:01:c5:73:3c:8a:2a:6f:52:51:85:d3:72:
71:64:58:fe:65:73:d1:d3:a6:b0:d6:d7:a2:9b:51:
f6:7c:c8:3b:28:b1:27:e1:98:3c:26:da:22:1f:10:
27:81:7b:cb:b5:94:1f:ec:f2:68:94:04:b7:29:ab:
87:cd:ef:4f:43:e3:5a:02:c4:0b:49:39:46:51:2b:
64:b2:9e:08:a9:35:0e:53:96:d2:72:07:65:80:3e:
76:3d:30:e1:1a:af:25:bc:16:b4:f2:86:8b:7c:66:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:31:1E:E8:ED:13:9C:77:E3:94:EE:62:85:3C:8B:35:2F:86:C4
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:b5:96:a1:88:2b:4e:d9:b7:fa:3d:6e:b8:76:36:38:1c:
20:00:95:d2:5e:be:03:86:15:e8:11:c7:37:d5:10:19:59:fd:
6f:40:64:1e:22:04:1f:c2:ff:1b:ba:2c:03:de:84:d7:9e:e4:
06:c6:e3:69:26:bd:33:c0:b6:3b:d0:5c:21:71:5d:0f:15:79:
86:32:70:cc:91:e1:63:27:59:db:71:2a:20:1c:27:53:24:ae:
0a:67:d9:43:e3:0b:82:82:ee:2e:71:ae:a0:1d:a3:7a:5e:2b:
58:65:d9:54:24:ea:1b:0b:88:86:21:4d:93:41:49:2e:f7:52:
dd:d5:d4:14:c8:39:5f:57:b4:cf:e0:30:98:f2:60:3c:16:36:
79:26:da:b1:37:80:6a:d5:f9:80:e2:b3:2e:ac:79:81:09:19:
44:f4:9a:b8:66:ac:74:e7:a5:6e:f6:52:84:61:14:dd:28:a9:
db:17:c0:4c:24:1e:f8:f6:53:41:b1:3b:ac:82:95:46:c7:56:
c4:1a:18:4f:0a:35:c8:d4:13:6a:50:83:9c:76:54:a2:33:d3:
24:11:e6:ba:c1:20:0f:20:05:a8:79:dc:26:aa:b8:bc:e3:fa:
40:0e:b2:6d:bb:9c:3f:ef:ac:bd:a5:6e:8b:db:46:9f:21:90:
45:85:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:19 2025 by rpki-client