Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: Xf7GSSzSUwmsklY7nfyE5fOF4GGTM0j5DxC0Xn4gV00=
Subject key identifier: D1:D6:E7:5F:47:06:64:B8:D9:6D:1F:10:9B:E0:05:70:4B:1F:10:E1
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 01974967B341CC728AE4CC6B8C66508BC0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 138F
Signing time: Sat 07 Jun 2025 08:00:22 +0000
Manifest this update: Sat 07 Jun 2025 08:00:22 +0000
Manifest next update: Sun 08 Jun 2025 08:00:22 +0000
Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: h2AVC07p5guUQ4oZQEO6qUx5F7W2JGtA76gkciGSPBM=)
2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b3:41:cc:72:8a:e4:cc:6b:8c:66:50:8b:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Jun 7 08:00:22 2025 GMT
Not After : Jun 8 08:00:22 2025 GMT
Subject: CN=d1d6e75f470664b8d96d1f109be005704b1f10e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:8b:0d:f1:18:e6:29:78:be:36:04:73:f7:
e4:dd:f7:5a:b4:53:be:de:1a:b9:3f:fe:8c:65:ed:
f1:5d:6e:90:58:7d:b9:fb:b1:73:e4:f5:72:31:b3:
ba:ba:a8:91:9a:17:f8:97:bd:fe:62:52:59:c7:39:
d4:65:98:4a:b5:72:85:07:e0:b9:f2:3c:e7:57:49:
84:e4:6b:76:3e:c0:18:a2:e9:09:25:f4:0b:a9:d8:
73:0d:db:df:31:6d:a4:a7:9b:52:1f:0b:3c:6f:2e:
62:f5:13:52:e7:8c:89:de:ca:20:4b:73:ed:56:2f:
bf:27:4e:3b:9f:19:30:9e:cb:e4:8d:82:7b:c3:f6:
dd:56:9b:a0:f1:5d:89:10:69:94:ac:52:1d:fe:de:
2b:a1:22:1a:84:f5:9a:53:6a:da:f6:cd:58:88:96:
38:ea:6d:ef:00:6c:0a:ac:61:c9:f8:79:ad:3d:2e:
72:21:9e:0e:ac:a7:68:b6:e2:e4:a4:38:ec:69:0d:
2c:ee:6d:d3:4b:88:2a:6b:4b:49:bd:22:62:9b:b9:
c9:ce:f0:d6:51:a3:99:b8:d9:96:95:36:98:13:24:
bd:9f:de:12:03:54:85:0f:e7:36:23:5d:f7:6a:ef:
2a:2a:e8:0d:f9:a2:9c:75:38:6b:b1:c3:e4:2f:2b:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:E7:5F:47:06:64:B8:D9:6D:1F:10:9B:E0:05:70:4B:1F:10:E1
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:71:e6:40:44:dd:22:5d:02:34:3d:71:aa:65:12:38:6b:
e3:80:dd:c3:29:1f:7e:a2:09:31:2b:85:17:77:3a:d3:0e:93:
d2:51:60:43:6a:f1:2d:99:75:c5:2a:be:26:93:8c:b0:a8:cd:
68:e1:75:03:8e:2e:9e:ac:17:c2:2e:7f:a5:ca:1c:17:6c:8f:
15:49:e9:9a:8b:d8:6a:30:82:0e:0f:55:ef:4c:78:14:b0:bd:
30:cb:75:ee:14:04:3e:3d:d7:39:b3:5e:0a:62:f7:94:07:7e:
5a:be:b3:6c:8c:18:77:3c:68:99:08:d0:eb:41:00:82:65:f8:
8e:1e:0f:dc:d3:ca:3d:45:6f:13:91:1e:fc:f9:b4:35:01:19:
85:f8:71:fa:03:a8:c4:73:47:d6:38:7b:f2:c9:ae:37:43:b8:
fb:2f:c7:9f:00:62:aa:c2:31:9f:e5:8f:09:ed:ed:62:7c:75:
41:0f:8b:f0:d1:cf:74:ab:2a:1c:db:26:ac:30:ab:e3:cb:03:
08:7c:0b:ca:26:c4:3b:fd:3a:28:ed:13:c9:d8:03:27:17:32:
dd:68:c7:ae:78:1c:1e:34:f0:cb:75:db:cd:a5:f7:ad:1d:df:
67:e3:e7:41:ce:33:97:40:16:cb:11:d7:a0:1d:58:22:8f:2f:
66:85:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:31 2025 by rpki-client