Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: qkZTrP36m5EjaZ8LzKT1rSRaD0k8zPvxUBS2QdG2hLY=
Subject key identifier: 9F:B7:6A:1D:E9:93:DE:C7:8C:3B:A8:6B:C3:7D:1C:9C:0B:7D:59:1F
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 01984708B1B67E472E12E6A7B76D4883793A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 14:00:08 +0000
Manifest this update: Sat 26 Jul 2025 14:00:08 +0000
Manifest next update: Sun 27 Jul 2025 14:00:08 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: xrIyA/1a1FxyBuqOFN2ZftmuRtBsPbvZDWO62uVV/PQ=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:b1:b6:7e:47:2e:12:e6:a7:b7:6d:48:83:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Jul 26 14:00:08 2025 GMT
Not After : Jul 27 14:00:08 2025 GMT
Subject: CN=9fb76a1de993dec78c3ba86bc37d1c9c0b7d591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0e:4e:c7:a4:6b:d6:81:85:12:61:5e:1e:8b:
dd:2a:98:e6:bf:0f:b3:04:06:88:bc:2c:0a:f5:ae:
28:0e:96:13:72:a0:d2:3c:8c:e9:f9:94:c0:ab:f6:
af:8e:cd:54:77:73:cc:63:10:ce:d5:8e:cc:ee:14:
36:66:ec:c6:b7:8f:b9:c6:77:1e:51:65:a1:6b:19:
91:23:41:a6:67:7f:9e:43:e6:ae:a6:ad:66:08:d1:
24:bb:3b:57:62:9a:c5:2b:1a:94:f7:5a:a7:14:af:
a7:66:d9:c4:22:89:49:0d:cb:92:c9:a0:f1:67:a1:
e2:b1:c7:da:15:89:d4:3b:2d:94:84:f9:9a:14:25:
e7:f9:5f:ba:37:ab:fa:b6:4c:a6:5c:66:4b:ed:c1:
3a:63:66:94:26:55:d9:cf:55:49:3f:6d:68:9f:a1:
17:55:67:08:7b:0a:b1:4b:2f:8a:53:00:3c:2d:60:
de:63:7d:1f:2a:9a:17:4a:42:c1:ef:6f:1c:96:8c:
a3:66:3c:3b:82:3c:b5:18:b2:85:bc:2c:10:fb:76:
f4:49:f2:4b:12:bb:8f:32:75:87:77:20:96:d3:62:
bd:d9:7b:7f:f9:f0:18:29:b1:0e:16:d2:6f:a5:82:
d8:24:f3:cd:9e:36:48:4e:08:47:58:98:bc:38:f9:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:6A:1D:E9:93:DE:C7:8C:3B:A8:6B:C3:7D:1C:9C:0B:7D:59:1F
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:1b:bf:b2:61:64:05:e0:05:7d:11:15:2d:33:8c:bd:e5:
46:93:fd:00:36:8a:0b:92:e1:64:0b:34:8e:ab:ac:9a:26:3e:
97:c1:50:27:bb:d3:f3:f8:d5:15:34:4e:e6:84:49:42:41:f3:
0d:47:43:4a:8e:8b:3c:8c:5b:7e:57:7d:15:3f:ea:46:a0:49:
90:a1:92:83:31:2d:4f:3f:25:1d:b1:e4:71:59:a6:91:20:43:
1a:95:e5:37:3f:49:fc:5c:f6:97:fc:64:fe:99:ac:78:0c:3f:
ab:15:7e:1b:4f:94:53:4d:26:d7:f3:cd:f5:51:6a:1d:8d:30:
ee:10:12:97:c5:b5:bd:cb:14:f1:7b:2b:3a:e1:1f:16:ce:95:
60:65:1b:c6:ae:26:02:35:b0:ea:6b:21:a1:85:c1:65:59:fd:
16:f6:c4:38:2b:e7:e9:09:a1:8a:21:ce:3b:4f:88:f9:88:d9:
49:3b:b6:41:b9:67:bd:df:b5:92:80:7b:80:c0:ac:e2:81:02:
97:23:c4:38:3a:b1:38:61:f9:d9:64:0e:4d:0c:a9:80:4c:1c:
c4:9d:4e:ea:50:ab:6e:9b:b1:72:bf:a5:2a:d3:53:83:b3:39:
1b:23:66:a8:c4:8a:d9:3c:a0:ee:29:df:e8:97:9a:b0:b7:a5:
29:5f:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:53:25 2025 by rpki-client