Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: J/EkGbMhFUbp1eiBA4mbjXU/TigP4WuMk7cRvoMAgrs=
Subject key identifier: 01:B0:2F:82:59:BD:17:B0:0E:F5:A8:5F:50:E9:C6:91:AB:94:E1:60
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 01984964EC38CB7CD992CF9629ECB7260E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 10CD
Signing time: Sun 27 Jul 2025 01:00:07 +0000
Manifest this update: Sun 27 Jul 2025 01:00:07 +0000
Manifest next update: Mon 28 Jul 2025 01:00:07 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: w8d2KqNyIdGokCl3ldUOkiymCMuHqGQqTU/GD3q/XXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:ec:38:cb:7c:d9:92:cf:96:29:ec:b7:26:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Jul 27 01:00:07 2025 GMT
Not After : Jul 28 01:00:07 2025 GMT
Subject: CN=01b02f8259bd17b00ef5a85f50e9c691ab94e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:a0:52:76:b8:ac:84:91:bd:67:ad:cb:2c:
96:4c:30:6a:fc:99:85:4f:43:60:78:66:8e:bf:d0:
d0:59:8a:b5:82:9c:f8:9f:5f:40:0c:22:dc:5e:1a:
b3:ca:07:e2:7f:b0:8a:cc:88:8f:cf:36:eb:47:a9:
5b:c8:fb:e7:ff:f6:c2:e1:b6:b3:34:31:95:00:a9:
1c:de:f3:bf:0f:2d:38:71:f6:51:a4:41:9d:04:b4:
ee:01:19:dd:6e:90:bc:a3:5d:34:ba:98:fd:9e:14:
df:d2:a6:9d:91:c1:99:28:c2:f8:c6:0d:51:d2:7e:
97:04:b3:e5:e2:07:2c:03:95:ac:ec:9c:3a:dd:17:
59:58:2d:83:df:68:ff:37:3a:31:79:77:8a:55:2e:
55:c5:fc:08:aa:c6:55:10:a3:9d:bc:ef:2b:d3:bb:
54:b7:54:32:06:a0:49:fe:1d:74:1c:3a:27:57:aa:
97:e5:49:d7:b5:72:46:23:2a:2e:1a:84:bb:c8:1f:
d0:db:44:8f:fa:11:a1:7d:00:96:a9:31:d5:ef:84:
8f:92:cb:98:28:21:82:6d:5b:cf:e6:68:a1:6c:0e:
f5:d1:08:68:bd:da:32:39:8e:aa:3b:74:0b:47:61:
75:ea:91:d0:53:9f:00:d5:83:76:9e:61:53:45:d4:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:2F:82:59:BD:17:B0:0E:F5:A8:5F:50:E9:C6:91:AB:94:E1:60
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f6:8d:f0:1f:94:2e:96:51:01:27:b7:1e:02:35:e6:fb:1f:
20:e7:76:d4:50:60:28:90:ed:b5:fe:16:4f:0c:d2:63:34:c9:
c2:6d:b2:f4:ba:6b:8a:27:e2:7a:90:b9:e3:87:1f:27:91:d6:
1c:40:0c:1e:19:57:a6:ea:70:b1:43:3b:ac:b0:2d:7a:fe:cd:
fb:9b:71:72:9d:57:69:89:18:5d:12:c6:01:26:dc:4c:2c:70:
3f:41:fe:25:2e:b6:8a:1e:de:cd:ba:e7:08:ba:cc:e4:dd:2a:
97:d9:1a:b4:3e:ca:22:48:97:7f:54:fe:86:6a:c3:78:2a:4a:
e1:b3:37:2b:e4:a2:a4:4f:c6:9a:b5:70:5e:4c:a4:1c:f3:2e:
64:9b:bc:d7:2b:94:2f:e0:6d:65:d7:9c:0b:b6:0e:23:5d:3e:
ad:b9:e9:97:31:22:52:4d:e7:af:8e:e8:e5:85:a8:67:b9:92:
7f:e7:82:f1:78:92:f5:37:2f:a3:fe:6f:3a:6a:b8:9e:05:0b:
fe:c5:f8:29:c2:e8:a8:56:a5:78:b5:8d:b1:f8:a6:56:5a:7f:
58:22:1d:17:f4:a0:86:c6:7b:90:39:9a:6e:39:c9:3b:3d:44:
6d:8e:54:c5:74:52:2e:1c:63:7d:97:ed:65:38:78:13:77:ba:
60:cc:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:16 2025 by rpki-client