Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: V87JM2nCdqwo5efjybFU/kyVou4KgxMckDTkBgyuBxw=
Subject key identifier: B8:CC:8C:58:E3:A9:37:14:97:58:93:44:23:A8:36:1B:6C:DB:8E:E8
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 0199228D2BDD38C1B02DEB66AFC0A51D68A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 1161
Signing time: Sun 07 Sep 2025 05:01:41 +0000
Manifest this update: Sun 07 Sep 2025 05:01:41 +0000
Manifest next update: Mon 08 Sep 2025 05:01:41 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: xYc6DThLG5mbbtjUHT2QRTkQ/Mfq9d0ZSuxAmQDihs0=)
2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=)
3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2b:dd:38:c1:b0:2d:eb:66:af:c0:a5:1d:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Sep 7 05:01:41 2025 GMT
Not After : Sep 8 05:01:41 2025 GMT
Subject: CN=b8cc8c58e3a937149758934423a8361b6cdb8ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:df:77:57:2c:46:f4:a1:97:76:74:de:bb:
aa:2f:64:34:8b:a5:08:c7:1c:c6:c1:27:91:d5:a5:
68:00:5c:2d:e6:52:63:31:c9:30:ff:75:af:f3:54:
9f:05:2f:87:e4:d2:96:9a:0c:6c:29:e8:81:4a:92:
fc:c1:86:b7:8f:0b:68:42:76:db:6f:f6:10:70:ff:
a3:2e:cb:2c:f2:52:6d:f9:be:6a:47:59:72:82:61:
e6:c6:49:96:59:7f:db:04:a5:8f:bc:02:1d:fd:47:
71:99:92:b0:b3:14:69:77:34:cc:68:90:a4:0f:9a:
4a:d2:93:b0:15:83:ae:79:6a:0e:7c:9a:07:9a:9d:
9e:23:61:14:75:32:40:61:59:b8:71:33:e0:bb:c6:
af:03:c8:99:47:3d:46:47:fb:70:d6:62:4f:03:4d:
31:ee:0e:b8:46:c1:ec:ec:bd:d8:4c:ab:75:dc:fa:
16:7b:2f:46:ef:49:74:ec:5d:75:0c:7f:25:b1:03:
60:04:a2:23:dd:6f:04:40:04:0f:35:f1:fe:3a:e8:
e0:73:f1:f0:ab:8b:64:ed:95:c4:ea:82:49:c4:3d:
88:c0:df:72:4f:9b:06:10:20:28:f1:ac:ee:06:3d:
bc:13:ce:61:d4:a4:12:1c:7d:f7:2a:6a:c3:59:8f:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:8C:58:E3:A9:37:14:97:58:93:44:23:A8:36:1B:6C:DB:8E:E8
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:e3:5d:86:25:4d:bf:e0:72:67:86:e7:1e:76:6f:76:85:
cc:7a:95:50:98:8c:4e:e8:3f:fb:c4:e6:08:71:5b:27:48:2f:
6f:3f:09:0b:92:9e:41:3c:7b:48:87:8c:33:2d:8a:7c:a7:6a:
b6:e7:34:6c:78:ff:c8:3b:0a:a2:61:88:59:c1:2a:55:e8:ea:
50:b5:90:c7:27:4c:36:aa:24:31:f8:6e:9f:4b:1e:14:16:a8:
f1:70:8b:58:ed:d5:85:73:2a:28:8c:63:87:e5:ca:d0:47:0e:
26:b4:cd:fc:1e:b2:a8:b0:e4:4e:e1:45:05:85:62:70:15:e2:
4e:41:5b:e1:49:08:7b:ee:e6:97:d0:07:5d:62:d1:85:90:25:
22:14:d7:89:27:fd:d2:b5:29:39:2f:11:16:61:7c:07:2d:da:
a3:bc:cb:f2:4c:bd:b3:21:92:54:ba:57:d1:dd:d8:03:9e:fd:
31:f6:42:f5:c7:0d:59:e8:ec:c0:ce:ad:f9:4a:1e:d1:3b:94:
43:24:ac:09:e1:5a:11:0a:0d:02:1e:f8:6a:e2:fe:e9:6f:a8:
8d:d3:be:35:6e:6c:86:d5:38:68:3b:af:c3:0e:77:40:cf:41:
9d:08:e5:ad:82:8a:ca:38:da:46:2b:00:99:47:77:2e:6b:fc:
26:a8:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:27 2025 by rpki-client