Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: fsHFxLftJViDARsQkNVYNebD2H/+GfqaDK0d/5F6j+A=
Subject key identifier: A8:CD:B3:C1:EE:3D:45:7B:86:28:D9:59:26:B8:BE:2D:DE:31:AA:BC
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019756B6219DC83CD90EFD50489652717155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0B4B
Signing time: Mon 09 Jun 2025 22:01:06 +0000
Manifest this update: Mon 09 Jun 2025 22:01:06 +0000
Manifest next update: Tue 10 Jun 2025 22:01:06 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: 3qaH8FSKNHWceyjqAer55rbqZYJgON0n6FuNTyEVsJM=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:b6:21:9d:c8:3c:d9:0e:fd:50:48:96:52:71:71:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jun 9 22:01:06 2025 GMT
Not After : Jun 10 22:01:06 2025 GMT
Subject: CN=a8cdb3c1ee3d457b8628d95926b8be2dde31aabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:2d:38:75:9c:84:aa:7f:2a:81:2b:5d:b1:
5d:6e:fe:46:a5:f5:91:c1:ae:52:37:d1:1a:e6:3d:
ca:9a:09:a2:d6:d1:75:75:5e:76:f2:d3:c4:83:50:
40:01:7b:be:ad:82:6a:c3:69:21:3b:2c:20:7d:5d:
6a:6b:14:08:cc:a6:bf:ec:ee:cd:86:20:a3:1b:27:
df:d5:32:5e:0a:04:81:09:a0:d1:e1:40:13:87:f8:
a0:eb:73:b9:d8:02:43:54:67:25:aa:b6:f0:10:98:
12:9e:ef:ab:38:3a:53:b1:3f:1f:8a:9c:27:c3:a1:
23:e2:ba:ca:eb:8b:bd:c8:30:ce:ca:30:9a:df:e9:
84:c4:b4:09:8b:25:70:ab:e0:86:4f:0e:61:41:69:
c1:65:d2:32:50:bc:61:24:dd:a4:82:7c:7e:60:08:
84:f6:81:fc:23:b2:a0:20:97:a4:4a:aa:49:e0:fe:
f3:74:e3:02:0a:68:d9:41:1a:41:1c:32:2f:51:5f:
ec:ee:96:03:f8:ce:f6:0c:08:ed:54:44:54:bf:c8:
c5:54:87:e4:d3:f4:28:d3:1d:ea:46:f8:68:32:82:
d9:ad:da:c9:29:07:f0:ae:a3:ae:32:fd:cb:16:f7:
9a:b7:a2:ed:61:e7:21:94:86:f2:75:c7:bc:42:96:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:B3:C1:EE:3D:45:7B:86:28:D9:59:26:B8:BE:2D:DE:31:AA:BC
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:4e:1f:70:0f:c1:6d:70:31:20:18:18:81:e4:0a:c4:c9:
d4:96:2f:f5:58:de:a4:22:e0:03:81:8d:f1:5d:9b:b0:0a:1f:
7d:b9:c8:82:6a:59:d9:32:86:aa:c2:fc:ca:9b:ab:91:61:a2:
81:de:88:53:bf:96:8f:a6:55:4b:a8:10:e6:c2:bb:56:ec:ba:
92:4f:ed:c2:fa:6e:b1:e2:cc:50:05:b7:b1:24:48:ae:bb:70:
8b:ca:2a:36:e5:31:bd:44:b4:12:d3:32:a9:6c:b5:f0:73:35:
4b:49:7a:12:b5:9e:d9:d1:d9:8a:50:b1:64:26:69:43:62:56:
f8:ec:cb:9e:a4:db:14:48:73:f8:2f:e4:0b:36:6c:70:c3:25:
cd:5b:57:9a:c1:87:63:0f:b1:e1:4b:6d:29:92:8f:ed:da:c2:
d8:6f:9c:24:ab:b9:8c:25:21:d3:17:65:e1:be:7b:b6:46:9d:
3a:ec:82:cb:55:14:36:ee:58:14:ab:e5:2e:d0:5d:02:d0:ec:
be:b3:d1:4f:9d:73:42:43:3b:6a:c2:3a:37:eb:39:d6:cc:39:
87:cb:74:90:16:1c:70:48:cc:16:84:b7:de:21:21:56:9e:9e:
98:65:34:38:fd:20:d6:25:ea:80:21:98:58:c8:bd:e8:ed:96:
eb:7c:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:33:45 2025 by rpki-client