Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: WBYq1V6IZcxQJg1DyFYu80mZCrBr3ftLjkBotEWChVY=
Subject key identifier: 84:19:14:65:3D:43:B9:B4:33:CC:12:C7:BE:C5:E1:5F:0A:21:2E:34
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 0197594904F94516920CB09D318F28581C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 0F61
Signing time: Tue 10 Jun 2025 10:00:46 +0000
Manifest this update: Tue 10 Jun 2025 10:00:46 +0000
Manifest next update: Wed 11 Jun 2025 10:00:46 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: wZFVdu9DHlL685rDU1sj8BFhYnccsJJaOuhYcXyyr5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:04:f9:45:16:92:0c:b0:9d:31:8f:28:58:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Jun 10 10:00:46 2025 GMT
Not After : Jun 11 10:00:46 2025 GMT
Subject: CN=841914653d43b9b433cc12c7bec5e15f0a212e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:91:90:ac:cc:71:b0:c0:84:e3:7d:6d:e3:
07:a5:0c:3a:83:e7:5a:2e:25:70:17:b1:07:c6:89:
f9:57:41:51:6f:6f:bc:e3:40:25:aa:7f:77:4b:a6:
55:70:f1:4c:bd:ca:ed:0d:64:22:a1:73:5c:18:04:
00:8d:06:45:45:58:fc:27:b7:50:9f:5d:e6:00:4f:
a5:99:16:65:bd:b6:ac:8e:a0:aa:eb:45:b2:d9:40:
93:1b:a7:5a:45:a1:44:ba:33:65:bf:6a:3c:41:87:
4b:8b:96:53:cb:96:31:7b:9e:da:18:2e:58:87:ae:
29:5d:fc:c4:52:c4:30:f0:da:ed:e7:33:82:e1:23:
ef:85:8b:29:22:48:ee:83:92:1c:18:7a:5c:5f:01:
82:9d:58:b8:20:3d:34:56:23:df:84:ca:34:33:64:
ee:79:8f:3c:11:7a:86:3b:e7:6f:f0:4d:9a:3f:85:
cb:3f:fe:65:a4:d4:55:13:2c:b2:71:bf:1e:20:8b:
80:10:89:13:39:23:ab:46:84:47:ed:0c:90:00:2c:
2f:b6:85:25:05:5e:88:52:45:ce:81:2e:d5:22:32:
9d:09:38:d1:33:02:1d:a0:b3:e0:57:27:8e:01:cf:
c6:f4:bf:1f:d0:bb:be:f8:cc:8e:a2:52:d2:7e:ee:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:14:65:3D:43:B9:B4:33:CC:12:C7:BE:C5:E1:5F:0A:21:2E:34
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c1:5b:41:e6:73:d5:fa:17:65:db:28:de:03:9a:f3:f6:7d:
8f:3b:16:b2:14:b1:bf:7a:d9:f5:4b:3f:e3:3b:b8:7c:78:52:
b3:cb:7c:50:48:b7:0e:43:31:34:ea:32:1d:65:64:30:3f:f6:
5d:36:9c:fc:d2:00:61:a9:6f:47:db:61:9a:fb:28:e8:62:ea:
f1:28:da:c9:45:47:a2:a4:cb:92:a1:49:34:bf:14:9b:cd:06:
d2:e9:2d:26:80:c1:ab:cf:d2:d4:63:f7:f4:75:a5:9b:26:f9:
bc:2d:76:89:d4:c4:38:5a:59:2d:65:4c:79:db:f3:9d:55:1a:
a9:8d:d7:34:30:36:ab:8d:10:b0:cf:db:5d:db:a5:9e:59:21:
4e:4a:a9:2e:fd:13:75:b1:2b:73:d9:57:0a:12:6e:52:c5:ab:
11:91:fc:cf:ec:a7:af:12:45:5a:9f:6e:16:16:3d:bf:e4:61:
ed:cf:9f:90:e0:1a:a1:dd:4f:83:80:bc:23:d9:5a:c2:a1:f2:
4a:94:60:f1:29:19:7b:87:57:3e:61:4c:e7:63:0a:f1:48:b4:
5b:fc:be:e6:33:6b:f1:0e:9b:ee:b1:ca:86:36:90:60:6b:95:
87:ac:01:32:54:fd:9a:61:7d:c3:59:d6:bc:fb:6b:e9:ae:ba:
05:97:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:37:33 2025 by rpki-client