Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: YSkqlbvNDdUxhcKhqgPJpWu3TtJx84n3oe1sqinWwDg=
Subject key identifier: E5:55:35:44:43:57:CB:A6:9C:4E:75:3D:7A:23:1E:18:63:ED:44:7A
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01992DEC6483715CF99E3D936BDA5C96A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0C3F
Signing time: Tue 09 Sep 2025 10:01:30 +0000
Manifest this update: Tue 09 Sep 2025 10:01:30 +0000
Manifest next update: Wed 10 Sep 2025 10:01:30 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: WjaqMqpXMAIWTGUBDwAD4GaypmlcjHeG6Uk1bvRxcbs=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:64:83:71:5c:f9:9e:3d:93:6b:da:5c:96:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Sep 9 10:01:30 2025 GMT
Not After : Sep 10 10:01:30 2025 GMT
Subject: CN=e55535444357cba69c4e753d7a231e1863ed447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:1b:43:be:11:f0:9a:fb:28:09:fe:6a:e1:
37:7d:ae:5f:06:c5:4c:d9:b5:2a:bd:fe:5c:88:a2:
fa:70:65:c9:cd:02:c6:38:76:dc:73:e2:7e:04:d4:
de:17:d9:97:b1:10:02:40:31:2d:d8:39:a2:e5:50:
f4:b9:be:22:70:56:71:bb:c7:d4:df:bb:4b:d4:89:
64:5f:62:db:1b:0a:c2:86:56:be:ba:c8:97:7f:78:
58:f2:4e:d5:6d:49:7f:bf:48:fd:50:19:b7:52:62:
07:48:c1:9c:6c:ff:d4:f8:38:22:89:cd:1f:f9:ab:
46:70:f3:e4:8e:57:2c:b6:b6:4d:40:e1:22:06:05:
58:7d:7e:5f:a8:d7:98:b5:2d:1b:05:34:da:e1:81:
a9:e4:99:85:c3:dd:44:eb:61:24:d6:9a:59:af:6e:
e0:5e:48:f7:fa:c3:1c:03:be:d1:2c:7d:78:94:77:
7d:8d:ee:14:5c:18:0c:7e:42:a5:8c:6a:59:0d:30:
07:58:53:63:82:91:0f:de:8e:75:9f:a9:42:3e:ea:
b9:91:ac:40:20:63:28:c0:e2:c2:bd:8d:b6:1d:b3:
99:92:1b:4f:a3:58:63:54:24:90:7e:0f:c6:d9:b2:
84:e7:d8:6a:ab:51:20:f0:1e:7c:63:76:80:e7:fc:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:35:44:43:57:CB:A6:9C:4E:75:3D:7A:23:1E:18:63:ED:44:7A
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:c4:8c:3b:4c:ee:c6:30:f5:97:21:d3:47:57:32:16:99:
29:50:10:61:56:20:68:41:49:92:8b:da:59:6d:3b:f2:b4:59:
ae:f1:4d:bd:0c:f7:a3:c8:31:41:c3:f2:46:c7:09:f8:5c:a2:
0a:f3:4d:b6:8e:6b:63:bf:a0:27:e2:dc:d7:79:4a:2d:ee:5a:
39:9c:26:f0:58:de:bc:ca:3b:e7:c6:fc:81:eb:9f:4e:6b:c4:
63:6c:2a:fa:68:cc:b4:22:12:c5:59:5e:b2:13:13:fb:4d:e0:
63:51:c4:ba:c6:fb:16:59:18:1f:ee:91:01:1d:28:de:b9:c9:
65:2d:f2:80:10:92:ad:a9:46:b6:cd:5e:09:cd:d0:2d:ee:6f:
42:dc:45:f8:25:67:1c:4d:c0:18:f2:84:df:fd:ea:16:88:6d:
cc:52:33:5d:ac:0a:17:65:3c:9e:00:84:68:49:ca:98:4c:ad:
62:93:9a:05:2c:a0:53:17:05:4a:ce:f7:17:fb:9b:60:78:0e:
b7:1f:4d:d4:1a:e8:cf:6a:62:d7:bc:d4:6e:83:b4:00:e7:a0:
1b:03:13:43:f2:79:b4:cd:d7:69:cc:2d:1e:07:68:bd:49:4c:
ce:74:0c:24:b5:f5:7c:6e:13:4f:67:ea:6d:dc:38:c2:44:9e:
23:f6:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:27:40 2025 by rpki-client