Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: ATYCOSGh/GquYklTXHv0o/DdA5chmVQCoadIyFgfNgQ=
Subject key identifier: 23:6B:89:57:CF:5D:C6:66:8E:95:77:52:8E:77:8D:37:B3:C7:2D:A0
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01983FBD061207023A180871168E9283271F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 11CD
Signing time: Fri 25 Jul 2025 04:00:09 +0000
Manifest this update: Fri 25 Jul 2025 04:00:09 +0000
Manifest next update: Sat 26 Jul 2025 04:00:09 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: LLoZr0LxMD15UySM9CaYRf5D47qFVSxShzXSv49NKPI=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:06:12:07:02:3a:18:08:71:16:8e:92:83:27:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jul 25 04:00:09 2025 GMT
Not After : Jul 26 04:00:09 2025 GMT
Subject: CN=236b8957cf5dc6668e9577528e778d37b3c72da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:4f:e4:22:a7:8d:7f:e0:89:2a:83:4a:ef:
31:4f:ac:d1:fa:7c:31:e9:6f:89:b5:5b:2e:e1:4e:
f2:c1:60:20:f9:e5:5a:30:67:3c:37:85:3a:4a:ca:
25:e1:43:24:30:49:9b:40:ef:f4:f4:5e:ee:78:60:
ef:26:9e:44:06:d7:5b:61:29:4a:5e:1e:e7:49:28:
24:d6:a4:70:69:63:de:e4:0d:5b:15:66:b1:6c:f2:
80:6b:2e:8d:fc:63:bd:d0:96:dc:d1:a3:a5:8d:47:
59:d5:33:84:a9:f6:d2:61:51:44:a2:44:3c:04:d7:
ce:3f:2f:53:93:b3:c9:3f:f1:13:be:e5:aa:cb:c9:
96:c5:f2:56:47:ef:66:14:24:bc:99:64:0e:32:0b:
4c:30:4a:db:9e:02:04:83:a3:26:d1:e0:44:0e:ea:
9a:9e:7e:2b:c8:52:c8:b6:02:4b:93:52:86:93:7e:
29:07:1a:a1:10:4a:a4:e6:4a:5c:6c:fb:28:68:b6:
82:8f:fc:21:7f:0a:a2:aa:89:84:e2:13:f9:81:6b:
c2:84:7f:1e:d6:79:fc:51:c3:a8:a1:d3:36:91:37:
36:12:7c:fb:5d:2f:f8:90:25:15:7e:05:c1:7e:59:
11:af:79:dd:1b:ba:5e:3d:a4:1a:19:6a:39:d9:65:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:89:57:CF:5D:C6:66:8E:95:77:52:8E:77:8D:37:B3:C7:2D:A0
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:f6:a6:21:25:f0:87:71:bd:44:86:a7:16:71:47:a3:c4:
77:af:29:9a:ec:7b:a6:09:da:cb:4d:d9:bb:15:c9:36:9f:64:
98:13:06:38:0c:88:94:a9:82:95:32:7f:4b:57:fc:9e:16:12:
b9:c0:49:62:cb:09:81:f4:7e:72:77:b8:76:a0:f5:8f:55:ae:
ce:d9:13:33:08:7c:bc:8b:fc:04:60:dd:91:63:10:56:c5:af:
ac:5b:61:11:53:3a:d9:8c:ed:0d:cd:2e:56:d7:52:62:81:49:
35:b1:ee:57:b4:d8:e2:15:18:72:93:40:07:7f:08:e0:fb:7d:
f4:4e:68:9a:8a:b8:e8:58:b4:6c:30:d3:b2:24:eb:40:78:0d:
e8:ed:c2:65:de:71:7d:ba:26:5f:43:6f:23:65:44:58:4f:75:
cd:31:46:83:5a:21:95:d0:be:1c:46:c8:72:72:13:5c:78:cc:
d7:7c:46:f1:44:24:93:64:68:3b:03:36:4a:ae:e2:da:cf:c3:
4a:86:9f:eb:f2:d0:10:91:ab:00:82:e4:20:c3:aa:8a:1c:0a:
70:22:39:17:fa:43:41:1b:ac:a5:74:65:4a:3f:53:1f:f1:f1:
d6:28:24:2c:2c:2e:13:01:0c:a0:b5:ac:71:83:c0:48:81:9f:
37:ce:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:01 2025 by rpki-client