Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: IFvnNEOdtETlNL58RK/eu/f1S+Z9jJ1pLAtHPNGZ+Gs=
Subject key identifier: BB:A8:41:01:F9:5F:48:BA:DF:D9:B0:71:DD:85:D7:8D:56:2A:20:5D
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01975A92A8868914C5F87B3ACB3309DA1127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0B4D
Signing time: Tue 10 Jun 2025 16:00:50 +0000
Manifest this update: Tue 10 Jun 2025 16:00:50 +0000
Manifest next update: Wed 11 Jun 2025 16:00:50 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: /1iIbZCb2fLoTxRCEUetjg9mSfkKWogFI7rFseZN9RU=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:a8:86:89:14:c5:f8:7b:3a:cb:33:09:da:11:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jun 10 16:00:50 2025 GMT
Not After : Jun 11 16:00:50 2025 GMT
Subject: CN=bba84101f95f48badfd9b071dd85d78d562a205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:6f:3d:2f:5e:1f:e7:62:d1:e6:3d:fa:fd:
ba:c9:71:91:62:b1:80:6c:72:57:ed:83:7a:84:59:
d4:2a:8b:17:65:c4:84:7b:3c:71:dc:3f:17:99:26:
a7:28:f2:9f:26:10:f6:da:40:74:6a:31:4a:47:6f:
ed:45:3e:ab:99:33:01:9b:a3:d9:df:48:76:5f:3b:
ed:ea:11:36:6a:0b:01:30:07:b3:2e:51:5b:1a:57:
6a:c4:0c:76:77:fc:b5:0b:ce:67:08:54:c9:d6:90:
a9:5d:53:2a:03:8f:43:5f:e7:67:23:0a:4d:64:80:
44:10:de:7e:b6:8f:3d:ea:08:49:95:63:67:58:22:
76:bb:e0:b7:2f:e8:30:3e:c6:6e:7b:af:f2:6c:f4:
b4:30:98:90:a4:c0:cd:cf:02:5c:e4:57:cb:c1:f8:
75:c5:5d:b5:46:b7:3c:da:86:08:2b:68:d0:ef:44:
44:2e:f3:ce:e9:14:9c:6f:53:e9:47:5b:5a:72:be:
75:ba:63:cb:b3:e0:2e:53:8e:54:9f:7c:9c:d7:e8:
5b:d9:ff:b5:bc:f1:dd:f0:82:d0:a9:b3:77:8a:23:
bb:3d:c4:39:17:fd:f0:f4:37:4a:1b:71:1b:6b:17:
14:1d:2a:b4:8a:c0:18:f9:f7:e1:6c:fb:e2:e9:75:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:41:01:F9:5F:48:BA:DF:D9:B0:71:DD:85:D7:8D:56:2A:20:5D
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:61:01:ff:0e:27:30:c0:83:cb:fc:19:f0:24:27:d8:4b:42:
ba:47:a9:3c:d6:40:4f:c0:00:7a:3e:7d:18:f7:fd:61:b6:03:
61:4f:b6:3a:48:a1:80:cd:7b:2d:72:cf:55:12:a4:49:f9:5c:
41:c2:5a:85:cf:53:2c:86:74:34:bb:73:59:6c:91:60:55:37:
57:bb:b2:e7:0c:90:d0:b9:46:1f:10:5b:21:9c:db:a9:fe:99:
4d:8a:0a:68:d7:60:e8:0b:82:e3:7c:21:b3:86:04:3b:76:8f:
d1:84:8f:07:d8:dc:07:f5:10:59:63:00:3d:0d:ec:f8:05:54:
d3:8e:d2:e9:6e:13:30:0f:08:23:7f:fe:61:48:90:89:10:cf:
3a:72:6e:b7:3d:29:c0:73:8e:ae:2d:c0:00:a7:85:2e:37:db:
58:85:fe:2d:64:82:26:37:63:a3:20:8c:8f:fe:c5:a9:ed:07:
47:17:b9:d7:df:3e:ed:bb:47:36:9d:59:dc:d6:22:cc:d0:0d:
89:2b:57:f3:66:84:e7:19:60:96:33:68:93:84:b5:87:85:ed:
57:e1:76:5a:0d:ba:70:2c:ce:da:40:41:9c:4f:e8:24:e0:99:
1f:4c:0c:7a:51:fb:09:10:8b:54:55:dd:8f:85:ee:97:25:ee:
7b:9f:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:41:15 2025 by rpki-client