Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: TxQDUB6D+Sa1Bo+kYUfiQjyco9ib1IUlin35i+r96PQ=
Subject key identifier: E9:5C:3C:EA:E4:F4:7D:BB:BD:4B:72:31:B2:30:25:62:B7:E7:C2:47
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01974779ACC54DF760E9BC15D90334D5E701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 12A0
Signing time: Fri 06 Jun 2025 23:00:45 +0000
Manifest this update: Fri 06 Jun 2025 23:00:45 +0000
Manifest next update: Sat 07 Jun 2025 23:00:45 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: bQWuRIYhQdCXGgEKoYqFNH9ghE1EmnSZRPtnsDl5VrI=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ac:c5:4d:f7:60:e9:bc:15:d9:03:34:d5:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jun 6 23:00:45 2025 GMT
Not After : Jun 7 23:00:45 2025 GMT
Subject: CN=e95c3ceae4f47dbbbd4b7231b2302562b7e7c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:ee:71:d1:a8:84:4a:22:16:71:b2:33:82:
17:01:41:4f:c5:e2:cf:db:17:0e:42:4e:15:7a:2e:
79:30:f8:9c:3e:5c:02:57:32:86:ff:98:cf:a6:69:
23:86:10:af:64:fa:c9:7e:80:9d:98:06:16:bb:80:
8d:73:4d:fd:03:37:8b:d6:ad:64:d3:9f:7e:ea:27:
9b:c0:35:bb:3f:30:6e:33:1a:09:61:36:66:f2:27:
36:50:c6:ca:d5:05:96:18:0b:f6:6f:da:bd:f6:e5:
0a:6f:18:05:a3:1f:94:65:70:e5:e6:7e:9b:e6:03:
5a:31:c4:e6:da:40:14:53:bf:7e:aa:e7:77:4e:87:
04:24:0e:33:d4:c3:ec:74:a0:2e:e6:1a:e1:e2:a2:
52:c9:06:e2:93:5b:fb:8e:bc:ef:60:f8:57:45:ca:
86:7f:71:ba:5a:b1:fe:54:39:98:c1:e7:fa:13:2d:
0c:2f:06:e0:ef:b2:76:24:46:52:67:a7:f1:57:23:
3a:0b:be:48:a6:54:7a:03:a3:19:fe:6a:90:16:96:
65:2e:98:dc:ed:1e:3a:e0:f9:9e:28:83:d1:e2:25:
6d:ca:33:ac:f3:62:40:9e:53:0a:e4:26:6b:07:d6:
0f:3c:6b:a1:75:c5:23:31:8a:4f:ca:99:44:90:2f:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:3C:EA:E4:F4:7D:BB:BD:4B:72:31:B2:30:25:62:B7:E7:C2:47
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:34:03:38:7e:d0:1d:6e:c7:5d:29:20:f1:ef:84:8e:e1:fa:
be:ce:03:c5:74:63:52:89:e5:c3:eb:3e:cb:9a:d8:0f:d0:46:
9d:48:9e:67:65:fa:35:20:bf:6a:35:66:93:47:cf:3f:41:9f:
78:99:ad:fc:b7:13:b8:fd:25:dc:ec:5a:ac:b3:96:0b:38:86:
bb:b4:3d:3d:05:a5:92:65:84:64:46:19:53:c8:80:27:b5:55:
66:32:00:9a:28:55:3c:e1:ca:50:af:55:e4:d3:cc:a3:ee:48:
ed:93:2e:c7:7a:74:e7:74:c5:e2:36:f5:15:e7:95:05:4a:dd:
44:3a:ee:e8:29:a0:b8:80:f7:e6:c6:95:80:85:9a:46:20:cd:
7c:fb:10:64:7d:25:26:d7:ce:95:b7:92:39:97:b7:0d:ef:96:
1c:40:92:09:50:e4:72:c7:6b:8d:bf:c1:d4:4e:93:10:7d:1e:
86:ed:dc:f8:4e:bf:cc:df:cf:9b:44:e4:b5:98:f0:65:3b:d0:
45:02:6b:af:20:9b:3b:cb:a6:e7:62:56:8f:3f:81:4e:93:09:
4a:cd:67:59:89:8d:2a:a0:80:a9:59:2e:97:59:76:1b:16:54:
5e:c4:3f:86:10:69:a7:af:9a:3d:c1:4e:e7:ac:33:94:61:49:
49:b6:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:58 2025 by rpki-client