Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: yw5pn3QabjS3qmoA4PY6VeTbCfqa+oZS4mDw2Rag7Yg=
Subject key identifier: 14:0E:BF:6C:2B:5F:60:B0:F7:2F:A4:7E:CA:4D:6A:65:AB:D8:DE:BA
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0197481E4D85B6F85886D7EC8E8C6EBC9186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:34 +0000
Manifest this update: Sat 07 Jun 2025 02:00:34 +0000
Manifest next update: Sun 08 Jun 2025 02:00:34 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 6UTHyi861eq4U2SgklaqRviHL1JyV1ZygVX+6osTWwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:4d:85:b6:f8:58:86:d7:ec:8e:8c:6e:bc:91:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jun 7 02:00:34 2025 GMT
Not After : Jun 8 02:00:34 2025 GMT
Subject: CN=140ebf6c2b5f60b0f72fa47eca4d6a65abd8deba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:f7:5a:42:19:38:44:1c:b7:6d:03:37:20:
fd:72:5d:c5:92:8b:ed:e9:eb:de:ae:22:9f:03:4f:
24:59:32:9d:cd:61:30:69:96:e6:c5:31:d3:e6:5d:
32:d0:7f:4a:af:76:01:b8:1a:e5:ff:2b:7c:a5:91:
ab:1f:fe:f5:d3:12:36:dc:9c:0d:02:cc:8c:cf:d9:
7c:c0:6d:80:45:e8:f3:ab:ca:6d:11:70:cc:7a:95:
23:35:6b:20:b2:7f:0f:b8:10:c5:26:0d:c6:8c:54:
be:f6:88:78:6d:48:ec:ab:59:e3:64:42:62:60:f0:
60:58:00:3b:61:b8:b4:c5:19:12:fa:d2:26:06:d1:
29:d6:c6:ee:96:23:e4:bc:c1:19:8b:c5:49:2c:8c:
ce:1f:14:80:c2:2a:3c:af:35:0a:94:81:2b:70:c5:
48:d5:ec:7e:c6:39:26:74:5e:19:5f:d0:25:09:ff:
6f:cb:fd:70:8e:f5:4e:8e:0e:bd:66:f7:8a:2a:f6:
a5:52:02:f5:9f:3a:d8:64:d5:53:5b:fb:c5:ef:9c:
d9:a1:11:4d:31:dd:9b:75:7b:9e:c4:dc:46:fc:86:
8b:07:43:0f:1a:f9:46:c2:3d:34:ea:9f:69:09:53:
0e:82:9f:a2:a5:b2:00:88:89:ac:54:b9:cd:8a:1b:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:BF:6C:2B:5F:60:B0:F7:2F:A4:7E:CA:4D:6A:65:AB:D8:DE:BA
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f2:57:6d:02:93:0a:25:14:e5:7e:d3:60:79:13:84:cc:af:
f9:74:6e:4a:9b:b6:ba:eb:e9:eb:e7:18:a2:15:9e:c2:a4:c4:
0f:47:59:d2:4d:f4:a5:c2:d9:9c:21:da:54:7d:79:83:e2:53:
4b:dc:f9:03:77:23:3e:2d:44:ab:b7:a2:ba:4d:c0:4d:a2:92:
4d:ed:fd:3b:4c:54:9f:85:08:69:aa:42:57:d7:06:f3:21:ad:
ac:d3:3d:35:5a:dd:65:9f:88:82:5d:a1:32:79:d7:29:b3:28:
63:16:d2:8f:15:cf:84:69:b7:04:b3:4e:f2:20:41:b6:6b:9b:
5e:13:5d:bf:ae:7b:5c:c5:61:71:b8:3b:73:f3:3e:9b:eb:2f:
3f:3e:48:88:ce:cc:02:68:45:54:67:a7:46:64:1e:69:1b:23:
b5:fa:b4:2c:e1:db:22:b1:b5:49:7b:71:96:49:02:c5:6c:86:
cf:5f:f7:44:0e:0c:a3:e3:75:64:49:80:7a:6c:f5:97:43:1b:
6c:2d:20:a7:7d:40:a3:54:5f:d0:09:06:c8:f6:12:8b:14:d5:
4e:64:13:2b:d9:fa:7d:79:60:9f:41:fd:58:d3:39:32:87:3c:
48:c4:d0:8e:ee:a7:32:b6:2d:7d:ac:d3:5d:6d:31:66:74:fc:
6c:c7:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:02 2025 by rpki-client