Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: uzTBgOtssRYF4eQTjyg/FRb8UlbD4l4EuuNWj2377Yk=
Subject key identifier: F3:E5:E2:C9:28:E0:9B:40:7A:EB:A8:EA:A1:4A:F7:2F:73:64:24:41
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 019923A0AF4C906E488C557DE192FAF305D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 06F1
Signing time: Sun 07 Sep 2025 10:02:36 +0000
Manifest this update: Sun 07 Sep 2025 10:02:36 +0000
Manifest next update: Mon 08 Sep 2025 10:02:36 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: Z2Lqrb0tRNwRA4+rSzQtNcRanKCoQr/JVMNYYCdwYHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:af:4c:90:6e:48:8c:55:7d:e1:92:fa:f3:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Sep 7 10:02:36 2025 GMT
Not After : Sep 8 10:02:36 2025 GMT
Subject: CN=f3e5e2c928e09b407aeba8eaa14af72f73642441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:f3:c6:00:66:04:46:a7:35:2c:dd:1d:0a:
89:65:b5:5e:6d:96:0b:aa:e8:fd:96:91:42:29:f3:
d5:1e:40:ae:db:c2:4a:c1:2c:27:ab:3a:c4:c3:3f:
52:c1:23:65:24:e7:dc:f9:37:b0:cf:89:38:57:5f:
2a:4a:15:54:96:f1:c6:10:bb:4c:04:25:db:4a:2b:
96:31:cc:a0:e3:f6:55:39:60:22:3d:8e:e3:62:62:
96:b3:19:cf:51:4c:f9:66:a1:66:7d:18:24:ee:78:
da:c7:42:d6:64:83:1c:02:81:3d:3d:33:3c:17:3e:
9c:5e:4a:d6:c4:ce:4d:b4:3a:db:a2:60:ae:c7:10:
e7:86:03:b1:43:32:c9:89:37:03:8d:92:63:6f:9b:
bb:66:d6:0c:9a:1b:9f:60:b9:35:42:c5:13:e4:7d:
ea:54:42:e5:42:20:a2:12:fa:42:ab:45:27:0f:b0:
86:69:ed:27:49:42:09:86:d6:07:2c:71:99:c9:c1:
7b:fb:53:ca:6b:27:23:b0:e6:67:aa:0c:da:08:d9:
e6:5c:11:f6:50:a1:94:ba:a0:da:fc:a6:62:19:8c:
dd:85:f1:92:85:5f:4c:9a:bd:47:47:df:4c:0a:27:
e3:b7:d8:cf:98:cc:0c:1e:c7:51:eb:12:dd:9a:f1:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:E2:C9:28:E0:9B:40:7A:EB:A8:EA:A1:4A:F7:2F:73:64:24:41
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:45:4c:da:18:14:79:ac:a2:83:9a:82:c8:df:64:47:74:
91:32:d2:ee:bb:8c:51:01:15:29:02:be:79:18:79:ba:67:fe:
2c:12:b8:74:b8:69:03:34:b8:d8:85:47:0f:88:e6:0b:aa:17:
e8:6d:92:e0:d6:f2:47:4c:c4:42:1b:a3:8e:0c:13:f9:5e:5a:
a1:54:ff:29:a9:01:ec:14:f0:31:2b:66:8f:d0:88:a3:4d:a4:
17:3f:d1:7e:14:ab:ea:3c:7a:a0:76:c4:c2:ab:ef:4f:f2:7d:
97:56:0b:ad:0b:4c:25:dc:6c:08:0c:36:40:f1:24:10:44:a7:
12:63:b4:de:ee:ed:ed:2d:f8:ad:f6:3e:56:44:80:69:bc:73:
53:5a:60:ef:60:45:d6:55:a0:02:3b:26:1d:9b:c1:31:f1:07:
6f:83:f7:b9:6a:18:4c:c2:f4:f8:e0:41:37:5e:58:b0:bc:66:
51:fb:66:ed:6c:9c:7e:16:3c:c1:1b:ad:f8:bb:4e:f3:f4:f9:
4e:61:17:ac:02:95:f4:64:16:01:99:f7:e9:fa:e9:60:eb:a0:
43:9a:ed:57:fe:5f:f9:79:58:95:b4:ac:62:e6:b0:4d:0f:3e:
85:21:15:e4:37:b7:03:c2:c1:22:c8:2f:5f:ab:46:f1:6d:2d:
d9:f2:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:38 2025 by rpki-client