Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: uQgR2TThcQJ+yyyJevBFsmUUrMNNtf0PnXb57dbTXkU=
Subject key identifier: 1F:99:21:0E:4F:7B:67:7A:88:15:B6:66:FA:64:04:B2:7F:0D:21:0D
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 0199225528E1DA0A053D13123D8FFFC52A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 06C2
Signing time: Sun 07 Sep 2025 04:00:30 +0000
Manifest this update: Sun 07 Sep 2025 04:00:30 +0000
Manifest next update: Mon 08 Sep 2025 04:00:30 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: Jn2qXKGok9QGkkix2X6guFVAbV7gdB8BI8qDqPMKvJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:28:e1:da:0a:05:3d:13:12:3d:8f:ff:c5:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Sep 7 04:00:30 2025 GMT
Not After : Sep 8 04:00:30 2025 GMT
Subject: CN=1f99210e4f7b677a8815b666fa6404b27f0d210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:de:db:20:ec:0c:af:31:61:71:a0:bf:62:
d8:25:f0:51:42:ed:42:bc:48:62:57:67:fb:ba:ed:
30:d1:39:f2:75:c4:49:0b:78:a7:8a:a0:b6:ad:92:
66:19:28:05:72:16:e0:ef:8c:4d:49:31:d7:cd:af:
3d:b8:0b:4d:05:bc:0e:c2:d5:02:63:88:4b:ea:b4:
d8:c9:43:97:e5:5e:8d:d8:4c:62:ac:58:a2:8a:ef:
8e:ab:85:a7:b7:b2:0e:36:90:d2:2b:48:ee:82:79:
1f:9b:7c:34:42:57:80:33:77:71:f2:48:b4:c9:e0:
58:3d:ef:4c:50:75:77:41:aa:ce:f2:98:45:54:93:
c3:af:70:0b:18:d8:4c:18:b3:ef:24:63:4e:21:c1:
52:b4:40:e8:01:61:8d:01:2a:b0:0d:5a:0b:2d:e4:
56:b8:91:1b:36:13:a8:93:8e:62:ad:b4:f5:54:56:
9b:1c:c8:f7:1e:eb:cc:d8:0d:a1:e3:c7:86:6a:27:
28:87:d9:10:ca:7d:55:08:b3:ed:dd:f7:79:6b:99:
ea:dd:e1:e6:22:a2:b5:6c:7c:a4:d7:ba:df:01:df:
87:2c:4c:c1:8d:ce:de:76:7d:72:f5:ae:15:1d:da:
7f:f8:fa:70:e7:3a:d4:93:62:69:93:c1:b5:78:4d:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:21:0E:4F:7B:67:7A:88:15:B6:66:FA:64:04:B2:7F:0D:21:0D
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:52:80:87:b6:22:5e:a1:9c:4a:14:fb:3f:be:20:0c:1f:fe:
70:48:17:9e:7b:34:d8:f8:18:ca:70:6b:6e:da:7e:66:26:d1:
23:b0:73:04:c7:5e:a2:cc:ba:48:45:d8:c2:1e:a8:8c:04:5b:
0f:79:dd:97:a8:9d:82:98:03:7c:0b:c6:e9:6a:65:06:e9:b2:
3c:98:c0:e3:ea:91:af:c7:d6:d0:8d:15:c6:22:93:a3:bf:3d:
60:d9:bf:de:0c:f0:3d:e9:c3:3f:2a:ad:86:5a:32:9e:c8:c3:
0e:3c:41:a8:e3:df:5e:20:76:43:27:20:7f:50:9e:57:7a:94:
02:85:f5:b0:d1:c7:71:2c:cd:41:09:f5:a7:48:0f:76:4c:bd:
6b:c4:93:5f:4c:38:14:ca:1f:91:bc:c0:bc:dd:d9:df:eb:88:
d5:9f:2d:cc:69:c0:4d:21:96:b6:e8:e3:31:75:b8:d8:f1:4d:
8f:4d:8c:d1:a9:94:f4:dd:1d:87:b6:0b:1c:84:42:f0:db:0b:
3c:30:90:9f:96:c2:33:02:86:55:71:21:e0:5d:99:25:1c:df:
da:be:c8:22:f7:23:41:63:71:92:e2:4c:75:07:bc:b2:c0:3e:
83:24:2e:90:6f:1a:a4:47:ac:fd:95:b8:b2:08:20:af:80:2f:
c4:46:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:02 2025 by rpki-client