Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: vW/BkTIkEhgTcl5t+LUkPGig+iikA+tKW3/r0jxgxsQ=
Subject key identifier: 40:41:79:D5:FC:EC:1A:43:D2:25:08:6E:20:A0:78:B4:1E:7A:C4:FC
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 01975B3766A7B9EF7E97BC36CF0B53A24413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 0F62
Signing time: Tue 10 Jun 2025 19:00:46 +0000
Manifest this update: Tue 10 Jun 2025 19:00:46 +0000
Manifest next update: Wed 11 Jun 2025 19:00:46 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: TLUh2HFkSIKx6C+5FV5VEP72bWyT2P1mG7rOayJ7t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:66:a7:b9:ef:7e:97:bc:36:cf:0b:53:a2:44:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Jun 10 19:00:46 2025 GMT
Not After : Jun 11 19:00:46 2025 GMT
Subject: CN=404179d5fcec1a43d225086e20a078b41e7ac4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:3a:49:b0:5b:0a:59:a5:42:11:a5:6c:0d:
7d:3a:58:69:c9:19:54:28:81:6e:2b:32:50:bd:a6:
a3:99:3e:2f:1a:fb:70:81:fc:87:b1:12:c6:f3:2d:
1b:c7:35:67:c2:ed:01:51:26:04:e4:8d:32:5b:11:
cf:fe:58:ea:6b:3e:df:6d:cc:71:9e:ca:f9:a5:e7:
51:3d:40:b9:71:a3:c7:02:7c:da:08:93:df:83:3f:
8e:dd:47:38:51:12:6d:80:ee:e3:ee:92:8d:4f:85:
cf:f1:2f:71:c1:0f:0a:80:91:4a:4d:87:80:1a:e3:
f5:09:97:2b:b0:07:1b:bb:b0:6e:01:3b:ad:b0:7f:
6a:0b:52:e3:c5:23:a6:08:6a:1f:fd:4e:b8:27:03:
7b:5d:6a:04:81:a7:f6:09:c0:64:2e:39:48:62:5d:
6b:9d:9e:06:dc:34:6b:5a:b5:d4:41:81:b4:6a:29:
d5:40:1c:7b:9c:8d:fe:28:11:77:43:4d:22:68:1e:
8e:ee:79:38:95:3e:37:48:3e:e7:69:03:02:ad:89:
db:b3:de:60:ad:35:cd:e7:69:b1:c0:cb:63:c8:69:
98:89:98:f0:7d:97:89:b2:ff:21:e7:3c:af:0d:ce:
0d:6b:c1:05:ed:86:36:f4:f6:e8:08:bf:19:eb:80:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:79:D5:FC:EC:1A:43:D2:25:08:6E:20:A0:78:B4:1E:7A:C4:FC
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ef:79:32:f6:2b:37:58:d3:18:91:0f:d6:33:f2:48:42:1a:
61:98:af:b3:cc:3f:a4:e5:a7:41:46:a6:39:3e:cd:82:04:6d:
b1:42:23:e2:35:50:26:97:38:74:2e:6f:8b:07:25:44:d0:fd:
22:3a:55:17:74:4d:2c:d6:8b:5a:d0:ef:e0:bb:09:e7:74:c3:
ea:5d:66:f6:35:c1:38:58:57:c5:d1:f0:18:56:87:51:14:44:
f7:b4:c2:cf:68:2a:95:c2:3b:55:27:a9:21:a3:2c:0b:69:18:
d7:00:00:39:99:d1:7a:90:ea:37:0a:b0:a6:64:7a:f9:b6:eb:
6f:ef:8a:62:72:f4:9d:ac:f9:45:ac:52:52:b4:3e:75:cc:b6:
65:37:24:cc:45:0e:93:54:02:1e:e3:79:1d:b3:75:ff:cd:37:
40:9b:00:a5:58:fe:07:08:5c:e2:77:20:f8:d7:91:e0:6b:73:
e7:0b:d0:aa:50:1d:a4:5d:16:ad:b7:35:c6:d8:b0:e2:6b:6e:
af:0e:20:15:1b:3d:61:bf:e7:ad:01:36:87:87:7f:68:ea:1f:
14:90:bd:f2:1f:39:7a:2c:74:c6:d8:16:9e:94:a2:24:a8:eb:
e4:8d:7f:e0:e9:a3:04:1d:d9:6b:e1:e8:70:96:27:30:64:d3:
8b:9c:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:15:51 2025 by rpki-client