Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: VP3hV1J1AJ0XsJmA3nMw9+BQW39qGvD7iIRrGRv4XBc=
Subject key identifier: 20:B2:6C:67:BA:64:8F:B5:2B:A6:6D:34:EE:7A:B0:83:79:41:3D:35
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 01974A7AA99A34905095ADB66A79C2545AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0EB1
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: zlm9bygpWDNEzMxjDBbkoAN2Pt0F3Jt7vjZj1npdtVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a9:9a:34:90:50:95:ad:b6:6a:79:c2:54:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=20b26c67ba648fb52ba66d34ee7ab08379413d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:27:25:b1:0c:83:98:1b:44:fc:f5:f4:d0:
13:04:82:ea:11:ae:18:c0:e5:a9:30:d6:34:96:d4:
64:4b:60:e8:9e:c8:2d:aa:9f:55:1d:08:9b:6f:9f:
6b:04:b8:5c:5d:18:b2:c6:fa:99:cd:ff:c1:56:eb:
85:fe:ed:2c:7e:3c:89:53:bd:b7:99:53:69:bb:42:
2c:86:77:82:2d:29:b8:d3:b7:da:ec:20:82:63:92:
35:10:12:96:0a:e3:89:b9:db:9c:41:70:33:f4:92:
68:1b:63:70:6a:9b:d4:e1:b2:ba:57:13:84:20:b0:
01:fd:8b:ba:a9:fe:38:0e:c2:47:52:7d:56:1c:54:
d4:29:1c:78:cc:d0:13:0b:55:89:30:61:5a:b4:bf:
15:01:f2:dd:f7:6d:62:d7:a3:2a:4e:52:33:02:8e:
a8:f1:d9:a7:da:74:96:05:bb:0e:f9:b7:b4:65:76:
b4:43:96:f4:2f:0d:05:6d:40:75:35:73:fb:49:7d:
c4:25:e9:7e:49:83:54:e3:b4:41:42:67:37:69:0a:
6b:2e:f7:34:5d:9b:17:bc:42:da:a0:d7:60:8c:8a:
2f:02:9d:b0:6f:f2:31:3a:86:6a:d5:0d:72:06:f4:
17:e4:05:5a:21:4a:38:a6:02:71:dc:fa:8c:88:1d:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:6C:67:BA:64:8F:B5:2B:A6:6D:34:EE:7A:B0:83:79:41:3D:35
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:cc:a8:b3:40:26:07:e7:61:a9:00:ae:06:48:97:1f:af:
20:40:a0:d4:bd:df:d3:5f:44:f4:5e:72:79:26:8a:d3:66:e7:
e0:b3:94:85:af:dc:08:7e:ff:a3:91:81:68:67:d4:69:ea:ed:
a4:1a:d6:88:b1:b5:bc:8e:7a:dd:ed:7b:88:16:79:aa:0e:4c:
58:68:7c:63:f4:e9:e0:56:b5:97:96:83:1e:b5:2f:c5:e4:6b:
bd:f4:43:75:e8:e0:a5:ac:fe:cd:42:ee:93:90:c1:78:01:37:
80:0b:53:e8:50:3a:f3:95:d2:7a:be:e1:c8:6a:25:66:91:e1:
9b:16:80:0e:79:65:62:29:c8:90:a3:23:17:47:86:b8:31:24:
d9:ed:b4:1d:13:97:13:b1:f5:57:2a:70:42:ba:35:84:4e:38:
b1:d5:92:a1:07:7d:fd:c1:ea:ba:2e:bd:34:a4:6b:b2:13:59:
fe:b0:ec:be:5b:61:16:d7:60:c1:65:b1:e1:7b:24:c8:ea:0d:
63:f8:2c:fd:a5:aa:fd:7b:f3:7b:a9:0f:af:2b:37:4d:74:d3:
0b:47:ba:2c:b8:ab:0b:c1:a6:05:84:aa:21:25:6b:ce:fb:68:
91:9e:d1:2a:90:3d:ea:6f:a2:4d:21:ce:74:ad:e5:f8:6d:2b:
16:9a:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:26 2025 by rpki-client