Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: E+zpf3W39Kab4Jit0qp5mjHxXVAHBU/lnQOAtFQgKNU=
Subject key identifier: 98:29:7C:12:5C:D1:2B:ED:50:9B:4E:96:1A:9B:58:29:C6:B2:54:2F
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 0197499F3899F710A3D7DDD41D09F4427AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 04C6
Signing time: Sat 07 Jun 2025 09:01:00 +0000
Manifest this update: Sat 07 Jun 2025 09:01:00 +0000
Manifest next update: Sun 08 Jun 2025 09:01:00 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: 0sAnHcLoZQmt9g+SUeTpBRz3hoRHgQEIy4tRo3lPvZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:38:99:f7:10:a3:d7:dd:d4:1d:09:f4:42:7a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Jun 7 09:01:00 2025 GMT
Not After : Jun 8 09:01:00 2025 GMT
Subject: CN=98297c125cd12bed509b4e961a9b5829c6b2542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:5a:2e:f4:06:4c:e0:13:b4:03:a4:26:ac:
5b:1b:8d:d0:01:4d:89:30:c0:c6:93:44:72:dc:5b:
92:4c:29:2d:ff:41:bf:5c:7b:49:84:de:46:73:d1:
1e:f4:94:5a:0e:4e:e8:10:89:b3:85:50:43:73:23:
7f:e5:75:46:ad:fc:04:8b:25:ee:d5:49:85:15:50:
85:4b:05:fc:af:9e:aa:c0:85:62:ae:41:5f:40:3f:
03:e9:a4:7d:c9:cd:b2:2d:03:5f:68:4e:02:70:a5:
94:0e:9d:c1:99:be:ca:95:f0:99:f0:46:09:79:af:
a8:d3:6a:bd:2a:de:12:4a:be:33:fc:64:a7:fd:43:
28:7f:ba:e3:fa:37:6a:9e:0b:d9:38:4b:e2:90:80:
27:f4:25:ea:9c:29:19:9f:f2:f5:49:f4:b3:34:6b:
31:cd:c2:f4:6f:b7:a2:53:f8:d2:67:fe:bf:58:1e:
e8:33:e9:9e:d1:34:15:45:8e:24:2c:2f:62:1a:1f:
a0:1c:fb:bb:de:05:b4:64:41:44:c8:0f:dc:17:07:
21:b9:56:b9:34:b1:cb:a4:b3:4c:ce:42:e0:59:90:
8e:be:a1:33:bd:ee:86:1c:43:c2:66:58:78:3e:59:
3a:39:aa:e9:b6:43:4a:16:03:f0:d5:14:38:e6:31:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:7C:12:5C:D1:2B:ED:50:9B:4E:96:1A:9B:58:29:C6:B2:54:2F
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:8c:d4:ff:7f:06:08:79:47:5e:ee:79:98:0d:a2:7d:14:
71:e2:1f:2b:63:d9:6c:42:90:f9:83:07:85:2e:af:c6:b2:4f:
d8:2d:50:a1:f1:85:7c:34:d8:9c:23:a0:53:5a:1a:97:be:4f:
76:3a:54:d5:6f:ef:67:88:7f:dd:9c:c3:13:15:20:d6:11:ce:
a7:98:bd:35:bb:21:3c:f2:4f:94:08:21:74:af:fd:a6:0c:41:
8f:4b:99:fa:81:e1:e5:c7:a7:0a:ef:75:99:2c:51:6a:71:70:
0e:fe:43:24:3a:e7:78:93:ad:bb:0f:9b:7d:fe:15:10:12:b8:
0c:02:9e:52:e1:cd:f3:01:d8:72:4f:ca:ee:64:09:d9:36:91:
ec:8d:f9:d0:c0:6b:23:0e:85:9d:ef:66:ab:31:e5:8a:68:96:
16:c5:c9:3f:c3:49:d5:33:5c:43:59:71:0b:ef:b1:7c:4e:96:
35:a0:c8:ec:23:d7:4b:72:06:e8:f2:6e:14:ab:08:66:a2:49:
ea:ca:a9:a2:e8:d9:c8:c5:66:9d:7f:d4:d7:e8:66:04:7e:4e:
7f:3c:b4:a0:2b:c5:50:ad:b8:e3:27:41:13:fa:38:f0:df:de:
71:8e:ed:c9:9b:80:bd:c5:6d:19:b0:42:02:ea:ec:b5:ad:49:
ef:28:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:51 2025 by rpki-client