Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: CFFPWWUZLTvI/gU20T4xqCWg2vjn/2b5YlyH4JcE9lg=
Subject key identifier: 83:12:1C:28:59:83:69:70:D3:A6:F9:28:4A:46:93:A0:CE:88:DD:A1
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 0198CACA900D2B3324B8C6F083AA8D16D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0F78
Signing time: Thu 21 Aug 2025 04:02:09 +0000
Manifest this update: Thu 21 Aug 2025 04:02:09 +0000
Manifest next update: Fri 22 Aug 2025 04:02:09 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: M4Hg8yKKkP/Eo5sU++CWe19+DKR+dFWrUOJtaixVMI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:90:0d:2b:33:24:b8:c6:f0:83:aa:8d:16:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Aug 21 04:02:09 2025 GMT
Not After : Aug 22 04:02:09 2025 GMT
Subject: CN=83121c2859836970d3a6f9284a4693a0ce88dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:ea:34:13:d5:93:7a:c5:b5:f5:c2:07:bd:
4e:8d:8f:6a:a8:64:02:7f:ab:43:3d:fd:7d:b1:1c:
eb:72:a4:f0:58:54:ec:c0:76:81:6d:93:28:b6:69:
5f:22:08:64:14:a9:dc:ba:6d:ed:46:35:c8:50:dc:
4c:79:70:bc:59:4f:0e:7d:37:c1:91:a3:cd:82:c9:
d4:20:a1:e8:c2:2c:cd:14:95:e5:01:05:65:70:45:
1b:c1:8c:dc:cc:b0:4c:48:ce:06:06:a0:87:38:eb:
e3:9e:50:bf:96:1c:1a:15:d5:ec:2f:bc:4d:dd:7b:
93:41:e4:28:cf:18:6b:6e:bb:12:22:27:b7:6a:9c:
49:0c:3b:10:4a:79:77:9c:3d:a5:d5:2d:34:5b:df:
98:22:cf:96:49:e4:2b:63:55:74:62:bd:7a:c7:8c:
bc:9f:23:c6:76:c6:50:70:0c:32:29:85:c5:1f:bf:
fc:1a:81:d7:10:f2:3a:8b:fd:cf:e7:46:50:8e:92:
c4:e3:c7:4b:28:11:03:b5:28:a5:72:75:34:e9:a0:
3a:24:c2:c7:b5:d0:9e:8d:ad:cd:fa:cc:94:4e:12:
a4:09:a8:3e:15:ad:01:3a:f7:7a:25:0b:47:24:54:
bc:4f:72:2a:64:e5:ce:71:bc:5c:0c:22:d0:26:60:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:1C:28:59:83:69:70:D3:A6:F9:28:4A:46:93:A0:CE:88:DD:A1
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:02:14:43:23:12:da:ea:b6:af:1f:80:b4:88:fb:c3:e5:
4b:0e:f1:69:c9:81:5c:fd:32:0f:78:9b:54:1f:31:47:fc:5a:
96:72:25:16:bc:d8:01:a8:63:e2:1a:a7:f1:aa:14:19:68:a2:
de:5e:cf:b3:ae:84:26:8d:a0:ee:38:5e:be:ef:b6:df:65:36:
dc:cd:bb:9d:ec:be:05:82:dc:2a:4f:94:b3:c6:c4:95:59:c7:
d5:5a:25:cd:2c:cf:6e:0e:cb:2f:c3:ea:c7:72:30:72:a4:90:
f4:9e:9d:9f:ae:35:2d:2c:bb:79:c5:3e:f7:4b:67:5f:c8:72:
db:1b:e9:57:49:f9:5d:11:72:52:53:41:8b:81:4b:79:96:45:
d6:f8:bf:23:d9:04:a0:8e:ac:bf:b8:98:18:fe:8d:f9:70:b5:
76:e3:46:99:78:21:6a:97:b7:bc:25:13:20:76:79:70:43:30:
a4:67:da:fa:93:c7:8b:ef:56:57:79:5d:b4:3d:e5:55:5a:fd:
01:bd:29:31:33:56:ea:ea:f1:e4:a1:2a:1d:f7:48:ca:44:88:
5d:0a:01:99:0f:ec:ba:94:b0:cf:80:0e:26:49:74:00:26:91:
11:7d:65:ba:ad:65:66:a4:0e:99:a5:cd:e1:9d:d2:fa:8c:9a:
a8:87:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:48:39 2025 by rpki-client