Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: O13eR8QU21ZMXSZvdXl8R/NeTaUTCdNdsyVl5nLUX8I=
Subject key identifier: E2:B5:1F:E7:5B:55:22:D6:71:91:B8:AC:05:0F:8C:9C:3A:84:13:B6
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 0197CACC11784CEBEEF7C470B45F9FBB810E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 10AF
Signing time: Wed 02 Jul 2025 11:01:00 +0000
Manifest this update: Wed 02 Jul 2025 11:01:00 +0000
Manifest next update: Thu 03 Jul 2025 11:01:00 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: XTTtmXzv8evyA/zOBXfuLxkLoLwpmM02Kz4K1Srco30=)
2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=)
3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:11:78:4c:eb:ee:f7:c4:70:b4:5f:9f:bb:81:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Jul 2 11:01:00 2025 GMT
Not After : Jul 3 11:01:00 2025 GMT
Subject: CN=e2b51fe75b5522d67191b8ac050f8c9c3a8413b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:a0:9a:eb:55:ee:ac:d7:50:56:a5:36:9f:
2d:67:e4:bd:68:c8:94:a5:1e:3f:4d:8a:0e:fa:2c:
8e:88:77:17:a8:9d:9f:83:9c:bd:0d:a5:a0:d3:0a:
96:55:d4:1c:7b:7c:28:25:04:48:c3:54:04:d6:c2:
3f:cd:f1:42:5e:b1:8c:4f:1c:9c:bb:d1:6f:e9:99:
de:ec:ea:e9:9f:29:7c:46:16:74:fb:31:4a:e1:d8:
2f:ed:d6:73:40:10:77:c6:57:59:f8:93:65:8b:d8:
44:90:b3:e6:6d:71:45:28:cb:5a:40:8b:08:2a:ee:
c3:97:35:fc:09:81:f4:36:05:59:1e:ae:f5:93:30:
6f:f2:e6:2c:2e:0b:36:4a:4b:c8:bf:14:4c:2e:6a:
74:e9:4d:88:5d:b4:0a:04:b1:c7:7f:b4:29:6c:8a:
de:22:57:b8:29:f4:6c:14:0f:85:a2:f4:d6:ec:e4:
bc:53:02:f2:6f:9a:49:54:4a:50:29:46:d8:11:21:
3d:5c:ea:16:9b:d9:8e:3b:98:96:be:f0:03:cf:2a:
5b:2f:59:ef:57:79:54:70:80:9a:79:ce:dd:9f:97:
11:79:d5:5d:be:44:43:19:d4:4a:04:8d:17:b8:d2:
96:7d:91:82:89:0f:bc:a7:8a:56:be:a2:69:b7:92:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:1F:E7:5B:55:22:D6:71:91:B8:AC:05:0F:8C:9C:3A:84:13:B6
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:c6:3a:15:50:90:03:c1:c0:23:94:71:cc:d8:5e:4b:db:
77:db:a7:5d:5c:0b:bd:a8:c1:b6:96:64:cb:bc:d3:bf:fc:4e:
4c:47:d2:78:e6:f8:ea:44:dc:83:ad:bb:cc:a3:72:34:a8:eb:
db:b2:1d:74:b9:bc:41:d1:ab:52:c0:d5:fb:ed:9e:2d:83:0d:
b6:3a:4c:cd:37:6e:57:fd:c7:f9:b8:8c:f3:aa:26:bf:55:d0:
ee:02:61:f9:f3:fa:87:b7:29:d3:e0:d2:0b:69:eb:6a:86:d5:
1a:9d:6c:ca:81:49:b5:7c:0f:cf:05:d2:48:77:8d:90:7e:e1:
34:73:25:39:a4:f7:5a:d2:a8:79:7b:96:69:42:da:3d:c5:30:
be:ef:73:59:6d:4b:eb:ef:17:fe:9f:a8:ef:1e:60:94:b2:4a:
22:9f:66:ab:d7:d8:dc:c1:c3:64:de:a0:b1:40:bf:51:09:c6:
3a:f0:8d:bb:9a:4f:8a:cf:e8:5d:dc:0f:cb:33:fd:69:0a:a7:
80:a1:0e:d0:8b:f9:8a:5d:d7:ec:5b:85:fd:2d:6e:f6:ab:f0:
62:ac:82:b7:5f:11:ff:9f:6b:78:b5:ba:30:65:30:4a:5e:62:
37:8a:18:23:8c:8a:9d:cf:d1:d3:a5:48:c4:e0:ee:14:6e:11:
9f:08:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:04 2025 by rpki-client