Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: Squ4toidMgE3llXtDuqGM/zG8KdmUGeiG70LEEjt0UU=
Subject key identifier: 55:8D:21:84:07:04:06:30:F3:9B:95:B4:0E:59:56:86:96:6C:AC:20
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 019923D5AB87A1383952E1C38D84CFC9E64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 03E9
Signing time: Sun 07 Sep 2025 11:00:29 +0000
Manifest this update: Sun 07 Sep 2025 11:00:29 +0000
Manifest next update: Mon 08 Sep 2025 11:00:29 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: C4BQdmsffMWRUBNG+DrwZwXm084lA2aMFFFNQW7dj6w=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ab:87:a1:38:39:52:e1:c3:8d:84:cf:c9:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Sep 7 11:00:29 2025 GMT
Not After : Sep 8 11:00:29 2025 GMT
Subject: CN=558d218407040630f39b95b40e595686966cac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:0b:30:ec:60:07:91:84:1b:d4:a6:81:07:
de:5e:4d:7f:98:cc:d6:f4:f4:8d:4d:e0:f3:82:30:
20:d8:fb:50:29:3e:57:9f:aa:a6:f5:14:f8:db:10:
88:75:25:4f:e6:4a:75:3a:68:68:bf:e1:7e:00:86:
8a:e7:05:35:c9:93:49:38:1e:47:e7:a1:90:f9:99:
89:28:06:c9:a6:0a:8e:cf:f4:9c:44:92:f8:50:28:
70:a6:0f:42:98:51:57:95:fe:84:d9:a1:ea:ba:41:
e9:b1:e3:c5:a0:3e:02:61:d8:ef:b1:3e:ed:fd:b7:
4b:88:29:57:47:73:3a:e1:ac:69:f3:12:b5:2f:96:
90:d7:6b:e8:46:88:ee:01:24:1d:6f:ac:9c:62:17:
b2:1b:4a:7d:a6:71:cb:e7:eb:83:8e:94:b9:f8:ca:
2d:62:14:dd:ac:2c:53:41:a0:1b:9a:8f:04:1d:79:
51:1c:fa:c2:55:d9:ec:1d:3e:e4:2a:89:a4:98:0b:
e5:14:0e:d3:20:22:13:8d:50:c3:d0:75:e0:1f:03:
2b:87:78:42:0e:79:0c:b5:a8:40:9c:24:e7:00:f9:
57:97:f0:3f:75:c2:66:94:e5:f2:df:78:29:57:91:
e9:92:34:3e:48:1f:a1:41:7c:ed:24:bc:59:d4:49:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:21:84:07:04:06:30:F3:9B:95:B4:0E:59:56:86:96:6C:AC:20
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:eb:7d:e7:58:be:99:9e:a5:fd:ca:c4:92:68:06:1a:58:
c5:66:ac:a1:9e:c7:e5:14:ef:a7:7a:c3:04:d7:1e:56:27:98:
8c:03:ad:b0:5d:7a:5e:53:15:bc:49:90:b2:5c:31:b4:0b:d5:
b9:4d:31:68:04:35:5e:b4:1b:de:25:f0:67:ce:55:6d:0f:6a:
59:de:dd:1e:a0:58:63:ef:af:5d:82:dd:36:5d:df:21:17:d5:
c5:c9:35:d4:37:c3:2d:70:a1:82:bb:08:ae:77:ed:1d:20:43:
a2:de:e1:fb:05:52:9b:d0:42:a9:25:d2:4b:46:4f:77:81:a9:
7e:5b:21:55:b2:25:03:63:b0:ea:95:6f:ab:07:a5:ba:cf:b9:
89:6d:b9:53:c4:c1:52:86:09:16:07:89:6f:b7:64:61:ee:11:
52:b3:3e:a1:ce:15:4c:01:6f:ab:74:77:54:db:8a:e9:92:40:
15:13:ac:8f:7b:88:9a:5e:96:36:27:ab:55:fd:3b:a8:7f:0c:
bb:a3:d1:df:6d:da:05:f0:12:3c:ab:ea:8c:43:47:a0:ed:e2:
6e:25:db:e2:8b:98:6e:28:27:e9:ef:2d:bc:eb:2f:ec:8c:42:
22:13:ba:d2:a8:30:3a:c1:4b:b0:07:8a:37:fa:c8:36:cf:cb:
cd:74:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client