Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: 1+e9gwcFR32UMiYnLs3a+te52L57gTKDvFVPp0KcfVw=
Subject key identifier: 05:0A:E5:4F:82:85:06:3B:6F:65:73:2D:C6:27:15:73:ED:FB:C4:0D
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0197662949C63C4A1CA8B69EE00D4462C6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0B53
Signing time: Thu 12 Jun 2025 22:01:11 +0000
Manifest this update: Thu 12 Jun 2025 22:01:11 +0000
Manifest next update: Fri 13 Jun 2025 22:01:11 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: hS7Tl3vhRgm9khFDN5E0n1eUDgSAfdc+HafqFxGN5vU=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:49:c6:3c:4a:1c:a8:b6:9e:e0:0d:44:62:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jun 12 22:01:11 2025 GMT
Not After : Jun 13 22:01:11 2025 GMT
Subject: CN=050ae54f8285063b6f65732dc6271573edfbc40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:12:9c:f5:da:aa:57:44:95:3c:c4:2d:44:
80:80:e9:08:63:27:ab:3e:22:32:ad:ec:6c:ad:b3:
72:3e:58:7c:ac:bd:e7:34:73:36:f2:3d:bb:dc:3f:
0d:d0:24:af:6e:c0:12:93:84:7e:83:1e:4b:fd:b4:
0a:a0:96:65:ed:ab:5c:f3:b5:08:06:f1:9d:25:fa:
72:43:34:45:ed:52:b9:0f:44:2a:15:b5:4b:98:35:
33:99:83:69:bd:7e:4d:f0:57:43:30:88:c4:ce:70:
26:f2:00:27:1c:7a:72:b9:2f:c2:5e:4f:ae:a4:1f:
a6:a7:2e:f7:fc:ee:f9:3c:6b:85:7c:fb:0a:66:04:
82:34:f3:b5:a6:3c:60:9b:65:4a:2e:d2:c9:74:a8:
d6:6a:67:d9:bd:f0:03:1e:95:9a:b2:f9:b0:45:af:
68:a0:a2:28:80:d1:a5:58:d2:ea:f5:cd:11:05:ed:
31:11:7d:30:2a:60:dd:03:02:d4:23:0d:e8:0b:20:
43:c7:ef:48:ef:29:29:fb:1b:d1:42:52:d1:ed:b5:
d9:c6:fc:52:6a:8a:e3:a3:e2:1e:65:d4:5e:62:7b:
ca:f3:14:fb:26:1c:77:a8:8a:75:f1:39:c9:e0:11:
55:69:fa:90:7f:ee:e6:51:a5:3b:03:ef:b9:9d:cc:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:E5:4F:82:85:06:3B:6F:65:73:2D:C6:27:15:73:ED:FB:C4:0D
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:69:f9:8c:52:c3:30:a2:7b:68:1e:d7:74:22:51:df:1c:c7:
fb:36:f3:f7:5e:a4:fc:70:14:85:34:a8:71:3c:e8:c5:25:bf:
5f:1a:97:8a:2a:ed:70:1e:a2:3d:16:99:86:60:13:f2:7a:2a:
84:fa:d8:34:da:ab:17:0d:49:4d:b1:92:0c:d9:14:a3:08:a3:
d2:2c:0b:1d:8a:41:14:c2:8a:79:5f:40:5d:01:8a:f4:35:b7:
a8:8d:aa:7e:e4:bc:e9:35:67:2e:ab:19:72:75:7e:d8:76:2b:
a6:a2:3c:05:98:43:4d:92:b4:8e:c1:78:1e:4f:7e:ef:5e:d5:
30:b1:bf:c4:ee:b6:81:d0:74:e4:73:4f:4a:bf:3d:1b:5f:77:
72:3a:e0:a5:94:f5:af:82:2c:df:59:87:78:34:47:63:10:c0:
b3:44:b3:81:4b:8d:f5:e1:ed:d1:07:49:71:3a:09:d4:95:2c:
30:a4:19:18:9a:f9:d3:8e:e4:c5:1e:ed:80:9e:8f:e2:f7:73:
c0:ad:e1:58:c0:29:57:2a:43:73:64:85:c6:97:e7:15:54:2f:
27:b2:d3:ad:ee:9b:3f:3e:ae:3f:73:2a:29:ff:f0:1a:b6:60:
00:53:ac:b4:7a:8e:88:3a:71:02:3a:1d:8c:bc:4e:ec:51:ad:
a4:c4:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:02:57 2025 by rpki-client