Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: j3+XPU3C8IW/QbWDm7LG6sLeJJfPuCboNpa97zcAvPc=
Subject key identifier: F4:81:16:36:05:06:E6:FB:BD:3C:7D:DE:F0:29:BB:10:76:F9:1F:10
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 0197488D33687DE5C2D60DBD6D5BFD1B3937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 1048
Signing time: Sat 07 Jun 2025 04:01:42 +0000
Manifest this update: Sat 07 Jun 2025 04:01:42 +0000
Manifest next update: Sun 08 Jun 2025 04:01:42 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: PWJADa/ynz5goae814A65XAXCxxgfhf8xhZ60ADppjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:33:68:7d:e5:c2:d6:0d:bd:6d:5b:fd:1b:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Jun 7 04:01:42 2025 GMT
Not After : Jun 8 04:01:42 2025 GMT
Subject: CN=f48116360506e6fbbd3c7ddef029bb1076f91f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:43:cb:8d:19:02:25:20:31:3a:82:34:36:
61:fc:49:f2:5b:1d:98:0d:ee:29:b3:3d:45:52:8e:
6d:d9:b1:17:81:88:c9:ad:a1:86:82:de:66:61:6c:
55:11:97:4f:44:1c:ef:49:d9:45:d0:ea:de:1c:d2:
6c:c1:e7:7b:de:16:c0:02:b7:44:47:f6:7e:c4:05:
f3:97:88:fe:74:0a:3e:9d:32:6c:d4:d4:fb:9b:78:
72:70:6f:ad:e5:be:20:d8:54:0f:d9:51:15:f7:73:
2d:bb:dd:e1:d5:d2:ae:94:0d:b4:25:6c:cd:c1:f6:
b8:60:58:59:8d:21:5f:30:1f:48:c9:b6:0b:ff:f5:
82:b6:0c:f6:eb:62:8b:97:86:a3:30:54:cb:48:25:
cd:e1:a0:97:98:41:71:e9:e7:ac:54:e6:0e:bd:9d:
80:0f:d2:dd:e4:0b:f7:d2:9d:ff:d4:64:2c:f3:a3:
4a:06:17:a6:0c:75:a0:c0:fc:63:61:f8:b8:fa:69:
4c:b1:9d:ab:90:82:dd:e8:61:e0:10:d8:a8:f5:db:
f4:93:94:bc:99:c2:e5:6c:0a:d8:64:f2:23:ff:ae:
c7:ba:bf:30:1d:8c:53:f2:33:1c:52:dc:77:3e:b9:
dc:7d:30:74:d9:49:b0:4d:f7:c9:e6:f8:a7:48:af:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:16:36:05:06:E6:FB:BD:3C:7D:DE:F0:29:BB:10:76:F9:1F:10
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:14:8c:e4:f1:36:2f:1e:d9:f4:66:e2:34:22:1c:da:8b:
2d:2b:3b:5d:08:a6:42:a0:39:ab:b2:48:39:a2:17:9a:65:83:
b0:21:0b:06:f1:f2:69:a6:6a:8f:66:8d:5d:d0:c1:58:71:3c:
6f:23:d5:62:8d:89:e8:f4:c0:a6:d8:b5:9a:e0:a5:a3:b9:79:
34:5c:00:c1:b0:7a:46:be:a9:e8:8c:25:b2:95:5f:58:20:a1:
02:d6:a9:f5:ac:bf:c4:2d:48:1a:7b:bc:d4:42:46:1d:aa:57:
90:e6:44:92:9e:56:d1:d2:f8:da:d6:f5:3d:5a:55:11:a7:cc:
79:f1:8b:cd:5d:0f:52:34:c9:08:1a:b6:1f:b0:6a:96:fd:1b:
b9:ed:11:77:20:53:b4:46:22:2d:cb:b4:f9:66:8a:20:a5:7e:
04:46:cb:04:7a:43:9b:26:54:79:1b:7a:d6:bb:b5:c8:b1:08:
30:56:3a:75:d9:df:c4:e6:14:96:1e:1d:69:59:db:05:5d:05:
24:b0:b8:fa:a2:24:c7:3d:46:0a:a5:0d:95:b2:a4:54:20:6f:
42:1f:d2:5c:22:22:50:5f:ac:ae:fa:fb:41:8b:72:a2:58:b6:
74:a1:fe:e0:aa:4e:4c:55:39:7a:ce:11:5c:43:90:02:e0:f3:
bd:a4:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:32 2025 by rpki-client