Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: wcvHR47simh9qlncCa/mehPrx/8x32TFHQGwrjlfZ6A=
Subject key identifier: EB:DE:FB:D2:61:62:C3:17:71:1E:8F:31:34:6E:7E:75:EF:81:6B:78
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019927E98F880AFF19AA72171EA79EAF6EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1167
Signing time: Mon 08 Sep 2025 06:00:41 +0000
Manifest this update: Mon 08 Sep 2025 06:00:41 +0000
Manifest next update: Tue 09 Sep 2025 06:00:41 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: SjUxx/6acGDh+JQJVt1WUyeMpIThisPC72SSGV3rHak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:8f:88:0a:ff:19:aa:72:17:1e:a7:9e:af:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Sep 8 06:00:41 2025 GMT
Not After : Sep 9 06:00:41 2025 GMT
Subject: CN=ebdefbd26162c317711e8f31346e7e75ef816b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:8d:2e:6d:0f:0e:4a:86:a2:50:c5:d1:c1:
6e:25:b1:44:08:00:17:3c:60:ab:9f:7f:c6:7f:67:
f1:9d:00:73:40:d3:70:10:47:b3:9e:fa:95:fe:c6:
f4:5b:61:13:81:7f:19:81:33:73:73:30:e8:28:b6:
a8:d9:99:3a:fa:b2:78:7c:0f:c4:0d:eb:56:2e:ab:
0e:4d:eb:0d:d2:6e:ac:d6:e8:e2:7f:e4:b5:3a:67:
42:d2:bd:d1:b0:58:a5:8b:2d:05:ff:8b:df:cd:d4:
3c:41:86:57:4c:1b:bb:27:25:5c:b2:ad:54:5c:19:
77:f8:6c:e8:70:d3:46:0f:de:76:4b:d9:d4:88:8c:
e2:14:c8:cf:91:2c:69:0f:b0:99:cc:ab:8d:66:ad:
cd:4b:ff:3a:e7:6a:6c:3d:7f:c5:1b:a5:89:0b:54:
05:3f:63:93:b1:1d:6b:8d:a6:0e:58:8d:df:3e:7a:
85:bd:40:56:52:07:fb:34:b5:d8:f7:06:48:25:79:
d5:be:d5:6c:ba:ae:2b:07:f9:6d:b9:2b:dc:10:8e:
67:c3:ad:c1:df:ac:db:aa:a3:86:c8:9d:3e:64:cd:
98:9e:67:cf:f3:a1:55:da:5d:7c:43:cd:d5:d3:63:
bd:97:ed:3c:08:53:d5:80:db:cf:9b:08:b6:24:04:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:FB:D2:61:62:C3:17:71:1E:8F:31:34:6E:7E:75:EF:81:6B:78
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:ca:f3:24:8e:80:c9:c8:cf:83:79:59:aa:17:b8:22:34:
41:f9:f8:1d:14:9a:44:4c:b3:dd:75:9d:74:14:e7:90:e2:4c:
f5:55:ec:49:86:be:cc:dd:6a:43:92:d4:35:ff:d3:61:e6:61:
6b:49:50:82:f5:dd:f0:b9:5e:41:e9:ab:65:bd:4d:ea:06:05:
46:7c:63:c9:02:66:06:50:6c:0c:20:90:5a:0a:d4:83:e9:cf:
00:32:61:27:04:a8:d9:8a:f8:df:ae:a8:29:9d:14:b3:0c:ba:
92:cc:63:4b:9e:3e:ec:15:98:0a:56:18:63:ad:a9:48:15:1e:
74:1a:ec:c0:8b:23:7d:5a:0b:07:ab:64:09:1c:1b:10:6f:e8:
2c:c6:0c:4f:6a:97:97:c1:68:91:07:79:04:58:cc:73:0c:cb:
d2:66:a8:2d:d6:c8:d8:0d:77:c3:88:ee:9d:53:1b:f0:a1:7d:
a5:b2:44:ae:48:e3:0b:39:46:ca:72:82:fe:29:a9:20:a7:8c:
84:00:3c:2e:04:3a:75:de:53:e8:ab:5b:52:4e:54:23:e6:9b:
a7:46:60:61:b3:b0:52:47:f7:f9:93:ec:ac:62:a3:79:06:0c:
4e:1a:34:95:0c:3e:30:24:04:88:1f:31:bb:d2:b9:9a:41:d7:
12:f5:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:53:56 2025 by rpki-client