Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: QvhRfbgCTGw83UhtElTkpqkWdBvBY4Ka+MAVkaYkMkA=
Subject key identifier: 8B:FD:66:FE:FF:C2:61:42:C1:55:FD:2C:29:77:99:5E:BB:05:30:CE
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01974C68ADD75C5227E139EFFFF88E59F588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 114F
Signing time: Sat 07 Jun 2025 22:00:18 +0000
Manifest this update: Sat 07 Jun 2025 22:00:18 +0000
Manifest next update: Sun 08 Jun 2025 22:00:18 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: 1HcXBfVqWwyAnozx/AvgQscubKQHlwZwFnutzUcsXG8=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:ad:d7:5c:52:27:e1:39:ef:ff:f8:8e:59:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jun 7 22:00:18 2025 GMT
Not After : Jun 8 22:00:18 2025 GMT
Subject: CN=8bfd66feffc26142c155fd2c2977995ebb0530ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:96:4a:3c:fe:9c:cc:87:55:c3:ce:de:f9:
5d:22:28:b5:fb:c0:6d:fc:5d:28:8a:3a:52:8d:9e:
14:de:bc:98:ee:9f:1d:ca:49:e0:c3:c0:5d:84:cc:
05:e4:12:6e:02:21:f5:03:f2:ae:0c:ce:b8:8f:f7:
b2:75:75:43:2f:4e:87:7a:04:16:cb:34:ed:4b:d1:
34:19:b0:89:3a:5b:0e:d1:5f:cc:d8:6d:f4:a1:90:
72:61:fe:43:7f:f5:36:3c:ef:52:8e:e8:7b:32:d3:
18:0c:33:50:2e:7d:d3:e5:f3:37:11:1c:05:15:a8:
6f:08:fe:1f:0d:97:c9:d6:bf:64:5c:bb:1f:5f:d7:
a6:50:f6:00:ba:3b:8b:6a:80:d3:03:1f:13:00:58:
53:51:15:99:e2:70:f3:54:4b:57:83:ec:cd:75:6b:
65:e5:e3:e7:08:3e:12:1c:d6:c9:be:9e:3a:83:18:
96:b0:55:96:b7:6c:dd:29:b6:0c:76:fd:e7:b1:d6:
1d:cb:e5:15:64:56:a9:b7:11:1f:f6:3d:e5:bf:f8:
e4:af:97:fc:83:9a:33:e7:57:40:5c:42:d8:07:83:
9e:98:62:6f:ae:9c:68:7c:e6:0d:01:10:b4:45:59:
b3:c2:9f:89:0b:7b:72:c4:5e:ec:1a:8d:c4:6d:57:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:66:FE:FF:C2:61:42:C1:55:FD:2C:29:77:99:5E:BB:05:30:CE
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fc:c5:9a:ce:d6:42:02:8b:53:86:b5:32:e4:c6:ca:f4:43:
45:50:82:b3:3d:2b:25:a1:2c:09:59:03:33:02:d3:a2:73:a6:
a0:47:bb:14:d0:51:df:7f:4e:88:59:3a:40:a1:50:a1:70:37:
95:5d:a4:bd:05:63:24:4b:5c:95:7d:f9:e1:8f:d3:d9:34:a4:
0d:a6:d6:7d:6e:75:70:d0:4f:25:9b:e5:5b:cf:71:3d:69:1b:
e5:57:88:4c:8f:e3:c1:36:47:d0:98:a6:a0:83:37:70:ca:34:
ec:a8:36:79:0e:0c:fa:1d:cd:f5:0f:60:e1:d2:c7:e1:46:c8:
cb:f1:d4:f9:ef:bf:ea:4e:c6:34:74:7b:c5:c4:16:62:36:30:
6f:89:2b:e0:9c:a1:54:f6:61:b7:28:b9:17:50:42:6e:75:03:
6a:62:73:9e:4c:39:c7:cd:e2:c3:fc:1a:8d:d5:c6:67:2d:84:
03:e1:ac:90:b2:a3:2f:ac:a1:8b:3d:61:e9:34:7c:dd:fc:26:
65:b6:24:0b:41:f2:b6:5a:2a:77:7f:97:47:4e:db:47:49:62:
ab:c1:20:db:60:0a:4c:66:78:e8:36:b6:53:5a:e7:ce:14:cb:
b9:7a:8f:a2:b1:c2:55:b2:13:ef:6c:2c:79:e1:43:8b:2e:c2:
52:b9:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:31 2025 by rpki-client