Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: Xocp5BqBfRqmk+RSAdIDwKhGxufdyttgcjHzCR3Ajqk=
Subject key identifier: B8:8C:C7:48:D5:A1:07:A0:E3:D1:E7:FD:1B:6E:A0:F5:36:8C:FA:F7
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 01976395A32DFD092A4E8A088DD54275F1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 0609
Signing time: Thu 12 Jun 2025 10:00:40 +0000
Manifest this update: Thu 12 Jun 2025 10:00:40 +0000
Manifest next update: Fri 13 Jun 2025 10:00:40 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: iZiN0I84ekBtWg6CjTZVvTW7MyORcW6v6PCV5/QoAVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:a3:2d:fd:09:2a:4e:8a:08:8d:d5:42:75:f1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Jun 12 10:00:40 2025 GMT
Not After : Jun 13 10:00:40 2025 GMT
Subject: CN=b88cc748d5a107a0e3d1e7fd1b6ea0f5368cfaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:f9:6c:bf:04:25:d3:a6:8b:26:e2:79:de:
60:70:a3:a1:b7:8c:cc:65:fa:af:f8:30:6d:85:7d:
af:96:6a:d8:5a:cd:cb:0b:a3:a5:34:f6:dd:a2:ea:
6b:74:81:bd:6a:e7:ef:6e:7d:6e:85:ea:04:b2:47:
fc:49:66:d5:d2:c0:3c:cf:86:e2:03:c8:a9:d5:f7:
c7:10:9a:cc:b9:0e:8b:97:96:92:7c:a2:bd:e3:42:
28:e1:d0:b8:bc:6a:be:fe:75:bf:fb:ef:0e:2d:55:
fe:86:3c:2a:68:ff:0a:d3:00:43:a9:81:0e:f6:46:
e8:57:93:10:96:1c:cf:18:6f:22:2d:56:b9:7b:e0:
25:a7:fe:1c:e6:7a:34:89:75:81:54:6d:ab:a8:17:
74:72:1b:fe:ce:69:36:09:40:c3:02:43:1a:48:8e:
81:3a:3d:3f:9c:89:e8:d3:19:79:2d:8c:a3:d2:42:
6b:ff:da:b4:41:b2:2a:36:18:ab:d8:64:e8:13:7d:
72:53:23:93:09:55:bb:9e:16:a2:f2:5b:59:92:49:
56:b7:47:f4:b7:26:2d:ad:41:74:7b:04:bd:08:19:
55:ed:20:04:55:1a:70:55:6e:01:de:d1:64:30:cc:
93:ac:9b:5f:88:1e:e9:f1:d8:54:fc:ad:55:98:04:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:C7:48:D5:A1:07:A0:E3:D1:E7:FD:1B:6E:A0:F5:36:8C:FA:F7
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:2e:95:9d:03:23:43:24:57:5f:1c:c9:29:a2:6b:d1:46:
cd:2d:f2:a0:b4:5d:bf:68:6e:2a:88:50:e0:65:de:cb:4d:5f:
4a:98:3e:6d:85:53:59:7a:66:9f:fc:b3:11:f8:aa:2a:61:ed:
15:cc:bc:60:fa:44:79:0e:1a:f4:a1:28:72:46:7e:05:75:11:
c1:11:3a:f5:ae:cf:30:39:6b:ed:26:ea:3b:f2:e7:22:f7:a9:
f0:5e:dd:e1:a2:7f:ea:7b:f9:b3:19:d1:cc:47:e9:3e:5f:7b:
03:d1:ea:ba:8f:65:09:f7:52:b3:e0:65:36:dd:eb:6f:09:5d:
3e:7d:06:3c:a4:10:41:6d:1f:6a:b3:b6:dc:17:8b:35:f8:b0:
92:3a:b0:ff:ef:b9:90:56:90:b7:50:58:95:af:b4:44:31:1c:
79:01:49:d6:f8:df:7b:ff:99:b9:34:2b:66:8f:22:fb:86:a8:
11:b7:d6:1d:41:90:2f:9f:5e:31:79:36:3f:f3:62:71:d3:03:
4c:3d:84:5f:19:8b:cd:17:c4:49:ba:1e:e6:0c:b9:3a:cc:c0:
83:7f:8d:c7:1e:dc:ba:af:fd:47:84:52:f6:10:41:89:e6:ea:
73:10:96:d4:bf:8f:fe:d3:d5:b2:51:e2:63:bc:94:6d:c4:0d:
d6:65:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:49:47 2025 by rpki-client