Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: 3w5ujyvQlbctx2zlz+c4LLlROGI+l+Ot5TTrB+t8Jr0=
Subject key identifier: D8:97:36:6A:F9:BB:3D:EF:57:02:67:72:A0:E7:A8:73:25:62:32:6B
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0197507CFAC008DF5FEE567741DD18E24FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 17:00:57 +0000
Manifest this update: Sun 08 Jun 2025 17:00:57 +0000
Manifest next update: Mon 09 Jun 2025 17:00:57 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: foENE5q2tevruAso5bnEPCgOGbQ7Ui1fHdgOtbWcRgE=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:fa:c0:08:df:5f:ee:56:77:41:dd:18:e2:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Jun 8 17:00:57 2025 GMT
Not After : Jun 9 17:00:57 2025 GMT
Subject: CN=d897366af9bb3def57026772a0e7a8732562326b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:9b:27:5b:91:ff:6b:83:4b:80:e1:4e:4e:
b0:88:46:67:5e:94:fc:f4:80:d2:09:f2:82:8c:d9:
93:5a:7c:60:1b:b0:34:fd:0b:81:a7:65:e1:7a:0b:
54:11:5a:f8:78:c7:8d:b6:f8:bc:7d:3c:fb:97:3d:
c7:ba:a4:bc:bb:70:2d:86:6e:c0:39:e2:f1:b4:1e:
35:88:3e:3f:68:de:21:e2:2b:fe:6d:23:22:66:f1:
8e:93:74:ec:74:85:b1:a5:e0:cc:6c:cd:4b:a2:33:
c2:76:9e:a5:ba:83:11:3e:b2:69:21:42:b5:2a:f1:
2c:e6:0b:22:27:83:b3:2f:c8:5b:68:b1:8e:a4:b2:
49:7b:89:27:b3:68:20:59:30:c9:95:ee:8b:84:08:
75:0f:d0:70:2e:d3:e6:6f:75:bf:c9:39:b5:fe:44:
68:8a:88:70:f7:3d:7d:15:f8:f4:49:97:00:06:19:
03:a3:3b:c9:d1:8d:9a:b7:f2:d9:ec:8f:25:49:94:
3e:54:bf:2c:84:c6:60:a7:c7:21:e1:ee:50:ba:72:
c3:9b:85:e1:ea:96:5f:49:9c:5f:bb:51:86:df:b8:
b6:18:08:b4:25:17:7f:fd:dc:3e:a8:a6:bd:d8:8c:
6b:e5:31:2a:43:37:cf:d6:34:2c:db:68:db:8d:2d:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:36:6A:F9:BB:3D:EF:57:02:67:72:A0:E7:A8:73:25:62:32:6B
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:a1:29:17:e9:1d:7b:05:08:75:cd:d3:69:e8:36:53:12:
33:81:9e:0d:03:1b:c3:31:20:ea:ea:96:bb:fe:f1:ff:8e:79:
bb:56:6a:ab:40:46:f3:4e:46:6e:35:70:6d:3a:96:ea:94:5f:
58:be:85:a9:32:0b:ac:6b:c8:9c:df:ae:5d:57:37:d8:9c:10:
81:76:77:59:a3:17:9e:b9:94:73:17:b3:8b:d1:0d:62:7c:8c:
c8:e0:aa:3d:77:7d:20:06:41:23:18:58:2a:d3:5f:31:b9:63:
49:45:0b:da:e5:ae:93:17:3a:cb:8c:6e:29:8b:ab:72:ae:6f:
dc:48:d8:50:92:3a:d3:36:84:b8:16:a6:75:b4:0b:3b:d4:a8:
1a:b4:00:76:fd:12:93:dd:02:42:7f:77:b6:19:63:7b:7c:66:
18:3c:17:d2:67:80:85:f3:b2:67:6b:46:1e:b5:d6:bc:56:c7:
c0:66:5f:27:56:b1:30:72:6f:51:62:09:b7:9b:8a:eb:f0:3c:
1b:45:e5:37:9d:0b:30:d6:d6:b2:e7:34:87:4b:d7:05:08:f8:
92:de:93:2f:9a:b2:ca:8a:ff:24:d5:ef:4d:0c:22:b9:44:7a:
f5:0e:ee:f1:fe:d2:da:15:89:fe:ac:4d:e1:71:a8:06:ee:d2:
a3:3a:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:53:03 2025 by rpki-client