Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: DbWVbQQ0COtrNK9z5KdsL6WmMxLJ/oRLKRvqjNTXXzU=
Subject key identifier: 44:6F:16:EA:B7:5C:8C:9F:EC:36:4B:8F:CD:61:87:C9:1B:3F:AF:54
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 01984B5347F3E4CF650D9BE38BA9CBBBC165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0D19
Signing time: Sun 27 Jul 2025 10:00:05 +0000
Manifest this update: Sun 27 Jul 2025 10:00:05 +0000
Manifest next update: Mon 28 Jul 2025 10:00:05 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: gr0M7Cos8HiWHcMnMhm1KmoBvsp1z3guK8/9JVrP4Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:47:f3:e4:cf:65:0d:9b:e3:8b:a9:cb:bb:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Jul 27 10:00:05 2025 GMT
Not After : Jul 28 10:00:05 2025 GMT
Subject: CN=446f16eab75c8c9fec364b8fcd6187c91b3faf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:17:7b:59:8b:40:38:86:83:41:3b:05:98:
91:73:2c:b0:cf:e6:c3:6d:31:82:5e:a3:69:e4:95:
9d:c6:6a:16:18:1d:ef:4e:56:b0:66:b6:e7:62:6d:
d7:f7:53:b9:78:c5:c6:c9:3f:0f:f4:92:b2:c5:44:
ae:cb:10:58:6d:a7:f0:4a:f7:06:fd:3c:a6:b4:93:
16:93:14:5f:7c:8b:fa:7d:c9:90:54:49:ca:5c:94:
73:f4:32:da:59:ef:e1:6e:f9:eb:54:27:fb:25:87:
02:1e:b7:f8:81:a1:8d:a4:ae:d2:f4:b3:6b:72:a9:
86:d4:34:29:b6:ba:42:3f:35:aa:01:91:56:85:14:
e8:0d:6b:b6:f9:5e:ba:62:9c:49:6b:93:00:13:58:
43:0f:4f:eb:46:42:76:13:0e:0f:fe:fa:18:ed:2e:
b2:b0:33:81:f8:93:2a:bb:23:48:83:40:d6:b2:d5:
26:68:47:84:58:c5:5b:87:5c:f2:dc:96:19:91:a6:
3f:5a:47:0c:2a:a7:54:1c:1c:cb:03:6f:65:42:95:
2d:5d:33:e3:51:4a:83:85:ae:f1:4f:4e:42:43:df:
0d:dc:12:90:35:38:40:78:8f:c6:90:91:0d:59:bd:
10:df:c6:53:f5:ee:70:9a:ac:40:f2:42:6a:23:b2:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:16:EA:B7:5C:8C:9F:EC:36:4B:8F:CD:61:87:C9:1B:3F:AF:54
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1f:9d:2f:84:4e:43:a1:bb:82:40:f2:61:f6:e0:8b:a6:de:
af:7f:c6:8b:a4:07:d3:69:3e:84:75:df:20:71:0b:c9:a5:41:
75:f0:52:30:bc:d7:68:f7:c1:c9:97:d7:d7:3a:91:8d:12:62:
84:06:47:74:6e:70:58:84:58:2f:bf:71:15:26:55:36:98:34:
4f:95:05:76:d0:d2:53:94:12:63:95:32:0c:54:e8:f4:a5:fe:
e0:c9:51:52:15:fd:c3:2f:ea:56:f8:d1:44:ad:b6:62:e6:d8:
0a:d1:80:b5:23:a3:b7:cc:94:1d:b5:53:8f:fa:82:dc:f9:04:
5d:a8:e7:99:56:f0:a0:ec:dc:5b:97:60:95:cd:e3:bf:65:b6:
a4:f7:69:d0:5e:09:31:ce:ac:d3:14:31:1d:2f:85:d0:37:87:
83:41:19:ff:f5:cf:3b:31:e4:5f:ed:5e:fe:76:d0:24:d3:e8:
90:a7:a1:0f:3a:fe:cc:4d:4d:74:09:de:cd:55:c7:e5:e7:f9:
9e:c6:c5:38:2a:aa:25:5e:f0:c3:08:d7:a8:5f:8a:9c:5d:65:
98:be:d8:82:62:4a:d7:97:82:96:77:fd:d0:00:4d:81:4f:8f:
17:94:ab:3d:0b:6c:e8:4d:09:bb:71:46:95:6c:90:00:56:2f:
af:b9:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:15 2025 by rpki-client