Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: /HEqhlVPdc8plhdL02fe3ViTdN3i/lLXHsaJuJqcJq8=
Subject key identifier: 46:EB:C3:CE:BC:56:9C:25:FB:C4:6D:D8:5F:A2:D6:5C:56:2B:E9:B0
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 01984AAED338A449D10F699C19A412123748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 15C5
Signing time: Sun 27 Jul 2025 07:00:27 +0000
Manifest this update: Sun 27 Jul 2025 07:00:27 +0000
Manifest next update: Mon 28 Jul 2025 07:00:27 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: KUG7UciwHmuj4ttZ5kmD80kFmww8sqFtetJyD2zE6WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d3:38:a4:49:d1:0f:69:9c:19:a4:12:12:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Jul 27 07:00:27 2025 GMT
Not After : Jul 28 07:00:27 2025 GMT
Subject: CN=46ebc3cebc569c25fbc46dd85fa2d65c562be9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:05:bc:6d:ac:40:b4:20:ce:b0:02:23:6f:
64:84:95:e7:39:65:87:8f:d4:04:ac:73:15:98:79:
34:5b:3f:81:dd:27:75:1a:03:63:0f:75:2a:f4:43:
59:0e:4a:69:4b:70:47:b6:bd:3e:e2:94:b8:b1:65:
a3:26:7e:d3:59:af:9c:51:e9:9e:d3:f4:2b:0c:5f:
b0:ff:92:8a:b4:6e:88:db:ba:54:9d:93:f0:35:5d:
7e:6c:62:11:6d:4e:2e:34:11:e3:7c:4d:d3:c4:fc:
6b:47:da:e5:86:28:d8:98:fb:f4:18:e7:48:e6:23:
e4:37:05:25:40:2d:3b:ec:04:0d:6e:6f:8c:30:fe:
d3:06:7f:fc:3d:f9:e1:06:9b:5c:32:34:b3:e8:c4:
3e:91:54:35:3d:a9:98:b8:0c:46:92:27:97:d6:8d:
1b:fb:d2:9d:72:20:3f:5b:28:20:bb:7b:0b:95:6a:
8f:99:71:dc:eb:e5:c8:b0:94:6b:5a:0a:0d:6b:f0:
b8:f8:81:21:09:d3:05:c5:05:17:f9:29:eb:8d:73:
62:59:6c:fd:15:50:ed:e5:4b:f6:36:e5:be:08:8e:
76:c5:84:e1:0e:7e:e0:69:79:c7:34:66:49:68:6b:
d0:e9:f9:06:db:f8:d2:78:05:9f:8c:16:f7:46:7f:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:C3:CE:BC:56:9C:25:FB:C4:6D:D8:5F:A2:D6:5C:56:2B:E9:B0
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:e8:b8:6d:ba:b7:fe:7e:d4:e6:b7:86:e2:2c:0a:39:8d:
66:2e:8e:4d:12:f5:03:8c:6e:be:fd:74:8c:06:95:b1:e1:1a:
88:63:6b:fb:57:7e:e7:3d:9a:15:4d:d3:3f:99:33:dd:30:cd:
68:cd:74:15:67:3e:be:25:89:11:2e:21:8c:80:d5:74:c9:4d:
94:94:2c:65:17:12:f4:f9:cf:82:e6:cd:92:2d:f4:8d:3f:4f:
d7:e8:ff:a6:22:59:99:7d:f8:6a:aa:51:a0:a8:e0:4c:dc:1a:
a9:e8:16:02:54:2d:42:d2:79:16:fd:cf:46:a6:c1:26:9f:18:
c6:af:ac:77:34:b4:7b:9d:79:60:8c:e2:ec:e5:17:1e:53:b9:
2f:63:fa:3d:7a:1a:a1:3a:f8:93:7b:44:b5:a2:36:06:19:41:
fb:99:71:dc:2f:f8:3c:78:a4:fe:ba:e0:ff:15:f7:2d:c0:83:
b6:ac:6a:12:da:63:5b:11:5e:24:4a:c1:c2:57:5d:9f:f5:73:
27:e6:50:76:20:18:70:36:b7:da:50:e4:4c:47:ec:42:2a:ae:
13:cc:43:63:bb:d4:d4:cf:4d:47:4f:50:d0:fa:c6:cb:65:26:
53:57:fa:8a:39:e5:35:8e:d0:47:74:19:3f:36:2b:0d:af:f1:
41:d5:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:11 2025 by rpki-client