Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: nt2O+chZVrVZJO0qUakHcLaOJDB7E1urxdB2btl+zok=
Subject key identifier: 18:DF:A4:B9:A6:63:AB:40:52:B9:DB:81:15:0D:A6:65:21:68:5E:D8
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0198499C6C541A4F1BCD9F0D2703D8376759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: bUwEty5+Uu5VsEEjgVCfS8/Tu6auLA8C81ynDcavH3g=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6c:54:1a:4f:1b:cd:9f:0d:27:03:d8:37:67:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=18dfa4b9a663ab4052b9db81150da66521685ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:e8:02:13:81:a6:26:0a:89:8f:74:7d:8e:
13:24:a8:1a:16:98:77:06:47:0b:93:96:06:27:1e:
20:53:a0:86:a4:11:18:b3:e3:a5:ea:c3:f3:71:cc:
aa:d0:b5:f7:cc:09:e5:a6:dc:30:d5:e2:50:b6:66:
99:df:57:53:74:4c:25:32:db:ee:5d:69:e1:eb:08:
6e:7c:21:ac:d2:c8:e8:4f:c2:1a:6e:24:27:47:5d:
bf:c2:49:94:08:d6:f2:2a:9e:fc:c9:00:8f:87:7e:
15:e5:dc:8a:c9:08:8e:2f:79:dc:30:17:91:cc:ec:
7c:77:76:55:01:98:b6:a8:81:46:bc:d8:4f:9c:50:
e2:55:e0:39:25:ab:ec:57:bc:f8:3f:6b:32:a0:c7:
04:b2:52:a1:b9:b7:43:45:9b:68:2d:9c:db:37:01:
25:08:66:7f:9b:67:45:1a:81:31:65:64:0f:ae:bc:
78:74:bd:66:cf:2f:cf:3e:64:af:2d:84:41:5c:1e:
c5:36:b9:18:9a:e7:74:18:51:7a:27:e5:66:fd:1f:
06:0f:39:6b:3e:e1:46:26:a6:9b:05:b4:fc:18:f3:
66:34:18:34:7e:11:8e:32:45:47:d1:9f:43:46:8e:
4a:6f:c3:4e:0c:bd:8c:c0:a5:ed:88:ff:e7:25:77:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DF:A4:B9:A6:63:AB:40:52:B9:DB:81:15:0D:A6:65:21:68:5E:D8
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d9:93:76:18:1a:de:ba:60:55:b3:a6:72:77:b8:44:11:89:
50:32:d7:b4:24:59:50:da:f7:4a:b5:76:47:64:16:31:ed:a1:
59:b9:cd:e1:1a:34:e6:1a:3d:dd:9a:a6:23:47:71:8f:fd:25:
2d:14:d9:f5:bf:3c:4b:49:2c:82:a0:dc:b4:c5:62:7b:50:7e:
f9:ae:b2:09:55:11:04:4e:e1:7f:a8:a4:9f:04:f0:1e:9f:14:
a5:bd:0c:d3:1b:ad:8e:5b:2e:f3:65:d4:ab:22:33:dd:e6:53:
fe:59:a7:01:1c:97:1b:89:a0:ea:76:13:29:b1:f8:3f:5a:e0:
ed:53:1b:68:4a:4b:1b:34:7c:86:4c:d3:1b:a5:29:13:9b:e6:
d9:73:2d:a4:e1:3e:9c:22:8f:13:a2:02:2c:bb:4e:8a:54:b4:
71:07:f6:11:f2:ea:2d:5e:22:e7:86:2c:23:c5:11:35:ce:30:
c3:9e:bc:b8:b3:77:7e:67:64:c2:c8:da:43:1d:02:bc:2d:c1:
d4:fa:1b:23:13:51:0b:75:a5:fc:29:7e:8c:70:31:b3:e1:b8:
f7:7d:0b:fb:eb:2f:95:2c:4f:4c:ee:fe:62:07:50:0a:74:11:
68:53:a0:dd:63:03:19:16:44:25:83:c4:89:f2:e1:ce:60:9c:
0f:24:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:37 2025 by rpki-client