Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: 4m4XOe59n12LN3f8kWMqJdKB5VjWQs088DTK5YG+4yM=
Subject key identifier: 45:4F:D1:E5:E5:D8:45:EA:58:41:64:59:98:54:FD:E1:AD:8B:A4:CE
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 01975A92776C9B7FE336F3906844AFF799F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0AA6
Signing time: Tue 10 Jun 2025 16:00:37 +0000
Manifest this update: Tue 10 Jun 2025 16:00:37 +0000
Manifest next update: Wed 11 Jun 2025 16:00:37 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: wA1q2BQ9yTrJ6kC0+E4BkkVpmIdh1ZGcU+0gejtU0Lc=)
2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:77:6c:9b:7f:e3:36:f3:90:68:44:af:f7:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Jun 10 16:00:37 2025 GMT
Not After : Jun 11 16:00:37 2025 GMT
Subject: CN=454fd1e5e5d845ea584164599854fde1ad8ba4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:c0:86:14:53:f5:fb:ab:0b:c5:75:bb:d4:
fa:df:a4:19:d0:8f:dd:77:42:62:dc:69:a5:aa:e4:
89:03:21:da:35:ae:8c:a8:22:a1:30:5c:a4:0a:d1:
79:6e:55:90:a2:1d:cc:9f:3c:48:0f:97:a2:09:76:
94:32:b4:ed:42:25:22:32:a7:0f:79:ee:6e:d0:0b:
7b:cd:4a:00:cc:2b:ce:21:63:9b:a3:bf:39:fa:86:
d0:a5:90:fa:5b:be:44:5b:82:a8:e3:ed:76:9d:6a:
97:ae:11:97:11:e9:1e:ac:e6:21:20:40:a9:bb:bd:
24:8e:a5:0b:b4:52:05:ca:04:2d:80:db:ca:0e:df:
2e:58:94:80:94:d3:37:73:fe:06:cc:e4:4b:e2:6a:
b8:1b:e5:88:ae:7e:6b:10:b6:72:ad:ae:58:96:00:
6d:13:7b:01:56:eb:19:dd:31:92:23:19:c5:fa:59:
9f:48:aa:07:66:cd:73:69:51:59:c6:82:7a:39:4c:
e1:22:88:b7:90:e5:59:d7:63:b6:5e:ad:ce:0f:0c:
c2:8c:c8:2e:de:c9:69:f0:0a:a0:da:6a:02:90:a5:
68:24:c4:c6:a5:cf:aa:16:5a:f6:d9:b0:b7:7d:43:
15:48:67:ce:80:70:99:ea:20:96:2f:c5:a9:d5:80:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:D1:E5:E5:D8:45:EA:58:41:64:59:98:54:FD:E1:AD:8B:A4:CE
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9f:29:49:94:9b:1a:cb:56:f3:b2:0e:8a:77:d7:b6:48:9d:
6a:ea:76:0a:15:09:bb:85:b0:99:e5:cc:aa:70:a2:af:b0:52:
ab:e3:59:9e:9f:87:ea:3c:f7:43:47:9b:19:c2:56:db:c2:a2:
26:14:c9:c5:d3:36:ff:9c:12:d7:aa:b0:36:52:34:ea:6d:52:
f4:b2:0a:c6:0f:3b:ce:5c:73:d0:1e:f3:ff:10:01:a6:bb:12:
0d:1e:5c:53:41:20:ec:c6:96:29:36:b0:bf:91:d7:63:7f:b8:
29:fc:1e:36:41:ee:78:17:e9:6d:55:e5:e6:a0:3c:36:8f:02:
da:13:ab:13:38:ca:ba:ba:b3:5c:84:93:54:e4:e9:35:51:38:
b9:3d:38:ca:0f:aa:cc:55:99:7b:1d:f2:eb:5e:f1:49:aa:2e:
69:d9:8b:06:10:99:d5:a0:67:5b:1c:a8:b0:73:47:cd:21:1e:
a7:fc:c4:30:04:28:a5:1f:87:76:49:30:6f:e9:dd:ec:e1:db:
6a:79:ff:93:8c:51:65:75:a6:fc:ee:96:8a:fd:80:4a:6d:3b:
9d:26:21:e3:53:dc:d7:79:f2:4b:32:23:27:60:62:14:ea:ee:
c5:78:1e:e0:74:fe:50:0c:bb:be:2f:da:9b:09:14:e5:38:d0:
1c:55:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:59:53 2025 by rpki-client