Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File: LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier: uDeC510A5DBTc+aF0GX/Q4HKQB7ozk1KTaVn3j4us44=
Subject key identifier: E3:AA:60:E4:0C:3D:32:58:CC:F6:7B:74:62:C2:33:6F:13:E5:FD:18
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer: /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial: 019921B27183FFF62A75CC012ABEFBD392C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number: 0FDD
Signing time: Sun 07 Sep 2025 01:02:46 +0000
Manifest this update: Sun 07 Sep 2025 01:02:46 +0000
Manifest next update: Mon 08 Sep 2025 01:02:46 +0000
Files and hashes: 1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: 9VpJ3PERW2AU1rl2GQ3X2X5/QA30rnp3lIsTIZqFW+A=)
2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:71:83:ff:f6:2a:75:cc:01:2a:be:fb:d3:92:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Validity
Not Before: Sep 7 01:02:46 2025 GMT
Not After : Sep 8 01:02:46 2025 GMT
Subject: CN=e3aa60e40c3d3258ccf67b7462c2336f13e5fd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b2:81:d9:17:4e:b8:50:29:1e:02:11:92:35:
d8:71:e3:de:8d:ce:ba:57:64:14:d5:e1:be:f9:6d:
10:21:16:d2:49:34:b4:b6:02:27:fb:d0:6e:15:57:
a6:39:c7:54:d5:eb:4f:71:29:94:e5:a3:d2:82:8b:
22:9b:5a:a2:42:8e:e9:01:4c:8b:6e:cd:56:2c:51:
c0:e0:7b:11:e6:39:aa:30:0c:d8:6d:b5:5f:52:d7:
42:90:15:92:3b:d7:fc:7a:a3:34:c8:ad:5f:6f:15:
64:e5:16:6c:1a:e9:2d:3b:f9:08:88:47:48:fe:56:
07:99:eb:ed:82:1d:e9:ce:39:3c:dc:35:ad:77:c5:
8f:91:32:ed:63:5c:8c:53:2d:84:f4:3b:68:78:59:
53:be:e8:c0:38:e2:74:11:11:ad:71:35:df:18:e1:
5c:9c:8a:35:9e:5e:fe:79:50:14:63:0e:65:c6:fe:
30:51:69:bc:18:ee:22:36:dc:53:2c:0b:92:14:f0:
ab:64:ff:2c:99:10:a5:0b:7b:96:69:07:b9:95:9d:
8a:c2:9c:17:c2:ae:e4:f3:ad:3d:07:de:c1:8b:8a:
ad:57:a6:69:71:2f:18:21:88:cd:1f:03:e5:3d:3b:
8c:10:cb:fa:ab:21:1b:80:a2:ee:0f:52:ab:e9:f5:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:60:E4:0C:3D:32:58:CC:F6:7B:74:62:C2:33:6F:13:E5:FD:18
X509v3 Authority Key Identifier:
keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:2f:85:d0:59:15:9b:42:05:bd:3e:b6:9e:7d:76:89:33:0f:
77:8e:77:2e:0e:38:e3:9d:f5:89:00:86:a2:2a:4f:ac:96:f2:
55:dc:84:dd:4c:01:9f:80:22:9b:68:74:b8:cf:45:52:dc:23:
a4:84:b8:c9:ea:31:cd:89:4d:63:be:8d:be:16:18:07:e6:d7:
b4:dc:ed:45:ff:c7:3a:59:b9:b5:6f:32:08:74:7f:f3:9c:f2:
8d:91:83:c3:92:ff:5a:6c:78:72:bc:73:d1:ff:53:bf:78:42:
11:49:00:67:9e:57:33:fa:fa:e8:18:04:64:27:b2:60:a6:c2:
f3:21:52:0d:7f:4a:4c:95:fb:ee:ff:8e:d6:d4:a5:02:36:22:
8d:6c:e1:b8:26:d8:63:1c:6d:c1:4b:82:0b:9e:be:5c:31:8a:
4d:95:c7:be:6f:63:2e:7d:4c:57:10:7f:b1:ce:38:85:3d:5f:
9d:78:8e:cd:af:cf:07:10:94:d4:fb:bc:1c:91:c1:5f:54:0a:
da:1a:89:65:8f:88:ba:7c:bb:b7:37:90:f5:c7:16:23:b0:36:
c4:58:be:7d:9c:7a:7e:e5:f8:6a:88:55:bb:ae:b7:a5:be:66:
d0:b1:b7:fd:cf:cf:fd:9f:d0:3b:44:d1:a7:da:a3:77:d3:f0:
fa:87:90:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsnGD//YqdcwBKr7705LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNjEyNjQ0NjdiMWE3ZmVmMWM1MTg2Nzc3OWU1YWQ2MTZi
NjE5Y2YwHhcNMjUwOTA3MDEwMjQ2WhcNMjUwOTA4MDEwMjQ2WjAzMTEwLwYDVQQD
EyhlM2FhNjBlNDBjM2QzMjU4Y2NmNjdiNzQ2MmMyMzM2ZjEzZTVmZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97KB2RdOuFApHgIRkjXYcePejc66
V2QU1eG++W0QIRbSSTS0tgIn+9BuFVemOcdU1etPcSmU5aPSgosim1qiQo7pAUyL
bs1WLFHA4HsR5jmqMAzYbbVfUtdCkBWSO9f8eqM0yK1fbxVk5RZsGuktO/kIiEdI
/lYHmevtgh3pzjk83DWtd8WPkTLtY1yMUy2E9DtoeFlTvujAOOJ0ERGtcTXfGOFc
nIo1nl7+eVAUYw5lxv4wUWm8GO4iNtxTLAuSFPCrZP8smRClC3uWaQe5lZ2KwpwX
wq7k8609B97Bi4qtV6ZpcS8YIYjNHwPlPTuMEMv6qyEbgKLuD1Kr6fUGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOqYOQMPTJYzPZ7dGLCM28T5f0YMB8GA1UdIwQY
MBaAFCxhJkRnsaf+8cUYZ3eeWtYWthnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iMzYzY2QtNWExNC00MTdlLTgwZjUt
OTIxNTg2NWQzN2I5LzEvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iMzYzY2QtNWExNC00MTdlLTgwZjUtOTIxNTg2NWQzN2I5
LzEvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1S+F0FkV
m0IFvT62nn12iTMPd453Lg444531iQCGoipPrJbyVdyE3UwBn4Aim2h0uM9FUtwj
pIS4yeoxzYlNY76NvhYYB+bXtNztRf/HOlm5tW8yCHR/85zyjZGDw5L/Wmx4crxz
0f9Tv3hCEUkAZ55XM/r66BgEZCeyYKbC8yFSDX9KTJX77v+O1tSlAjYijWzhuCbY
YxxtwUuCC56+XDGKTZXHvm9jLn1MVxB/sc44hT1fnXiOza/PBxCU1Pu8HJHBX1QK
2hqJZY+Iuny7tzeQ9ccWI7A2xFi+fZx6fuX4aohVu663pb5m0LG3/c/P/Z/QO0TR
p9qjd9Pw+oeQ3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client