Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: +UXh4EM4YuCLW8LWZl8TnMEGQSTjddTXNARLggp39c4=
Subject key identifier: 6D:10:5B:46:CD:37:07:C2:0C:51:67:E6:4F:BF:34:61:A4:80:21:BC
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 01975DCB8036D169ED03C4A5CEEDEFAEB056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 1015
Signing time: Wed 11 Jun 2025 07:01:47 +0000
Manifest this update: Wed 11 Jun 2025 07:01:47 +0000
Manifest next update: Thu 12 Jun 2025 07:01:47 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: kGPaH0cX4Y68rDJZ0m9z8PibWOcRnvEs0QuegIXa+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:80:36:d1:69:ed:03:c4:a5:ce:ed:ef:ae:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Jun 11 07:01:47 2025 GMT
Not After : Jun 12 07:01:47 2025 GMT
Subject: CN=6d105b46cd3707c20c5167e64fbf3461a48021bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:78:91:53:cd:e6:55:90:bf:50:59:87:c5:
45:09:73:e9:cc:63:58:7f:9a:34:b1:03:c7:c9:1b:
30:8a:37:6c:11:e4:aa:e1:e8:d3:20:8c:c1:84:4d:
21:65:64:c7:66:e1:e0:e6:24:91:3b:75:86:71:23:
3a:39:d9:82:72:a4:06:ed:2d:f6:7a:d7:5d:14:5e:
d2:90:43:d2:d8:4d:db:a6:5a:85:a6:fd:46:33:e0:
c7:dd:b3:4b:df:c6:e3:3f:83:be:e4:13:68:c2:94:
00:e9:f0:20:08:f1:cb:c2:90:1e:5d:d7:2c:33:bc:
c2:a1:8b:7d:05:2a:fb:d6:71:60:30:a7:d9:db:1a:
60:fe:e9:81:0f:f6:73:e8:04:e0:9a:ef:fc:78:31:
83:f8:7a:7d:10:fd:63:d2:54:37:ac:b4:48:80:aa:
a9:06:24:1a:7c:d8:2c:59:dd:b6:f5:61:62:95:13:
16:e7:cf:70:d7:53:bd:35:74:14:dc:d4:a1:d5:a4:
3d:15:26:91:39:75:ad:6e:f7:6e:11:6a:17:67:12:
7d:18:ce:4e:db:de:83:b7:e0:bc:ea:0f:9e:e3:7d:
e1:31:65:c4:c4:0e:85:2f:3c:89:b6:9b:61:f4:38:
04:75:68:c6:55:b0:c3:03:4c:2d:e9:29:f2:38:2c:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:5B:46:CD:37:07:C2:0C:51:67:E6:4F:BF:34:61:A4:80:21:BC
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:76:1f:7f:f9:22:a8:b1:12:6e:43:47:a9:cb:62:87:36:e1:
ba:74:3e:c8:4d:e9:0d:db:39:d0:84:e5:09:dc:f4:32:ee:3c:
b7:7d:8b:88:a5:16:b6:2f:2a:02:55:df:38:bf:4c:f6:6c:8b:
73:6e:18:b8:20:7a:3b:b6:89:1b:e1:c9:ac:a3:1b:f8:46:47:
aa:cb:47:03:8a:3c:dc:01:a5:db:77:20:24:5b:e3:15:67:6c:
63:51:c4:9d:dc:f4:6d:cc:6c:68:63:7f:aa:9c:d8:dc:cc:11:
36:e8:9e:44:12:57:7f:0b:f8:a7:26:a4:d4:2c:b5:07:81:b8:
47:d9:dc:b4:83:10:c0:b7:84:2b:94:2f:06:6c:f2:a0:f1:5a:
da:4a:9b:92:b4:07:2c:79:0d:1d:ab:66:45:c6:1a:8c:f8:7e:
b8:65:23:07:3b:85:76:55:b6:0c:56:9a:2a:3b:b3:41:55:e7:
88:38:e7:79:77:df:eb:8a:ed:00:29:33:46:a3:bf:b7:72:b2:
d6:ce:0b:6b:67:03:0a:b0:2c:2b:66:c3:1e:13:34:5e:16:67:
ad:57:c9:09:ac:76:5d:2e:c1:e7:02:76:22:cc:22:9b:15:af:
16:04:b4:dc:ac:8d:e8:17:c5:5e:fd:9b:89:0c:68:9c:66:f3:
cc:ff:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:41 2025 by rpki-client