Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: qVeS4DBgp4at12LM0nFUvkzt5NMlxZKXxyLgvCTt20c=
Subject key identifier: 5D:26:2C:F3:AD:DE:E1:09:E5:AD:04:07:00:B7:B5:D9:D0:60:07:13
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 0197469EA9C12D3635E7721D1713EAB474C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 02A2
Signing time: Fri 06 Jun 2025 19:01:32 +0000
Manifest this update: Fri 06 Jun 2025 19:01:32 +0000
Manifest next update: Sat 07 Jun 2025 19:01:32 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: /3Sz4ksL3+ER4CGIWnap9qgt6fsxqQwSStqtNGCaoVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a9:c1:2d:36:35:e7:72:1d:17:13:ea:b4:74:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Jun 6 19:01:32 2025 GMT
Not After : Jun 7 19:01:32 2025 GMT
Subject: CN=5d262cf3addee109e5ad040700b7b5d9d0600713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:42:6d:6d:aa:72:a6:48:8a:11:b5:bb:4b:
a2:72:43:5b:48:a7:67:51:d8:29:08:79:8f:ff:ce:
ca:99:c3:6a:2b:26:dd:6b:31:71:bd:a4:07:3d:ef:
e5:de:13:41:f2:fe:4c:d4:75:9d:32:2f:6a:cd:67:
a3:8b:1b:01:fc:25:47:af:83:7e:35:91:dd:d8:71:
08:88:68:45:f4:5f:d4:2d:f2:88:55:fa:76:40:07:
d9:66:00:51:f3:76:d0:a0:fb:2c:6c:37:13:95:5f:
48:f2:29:b0:d2:ee:12:c0:76:94:cd:3c:e4:bc:41:
e9:08:44:e0:ab:00:3e:15:0c:09:2b:cb:bb:90:9f:
83:a3:f8:35:5f:96:8d:af:5d:de:02:51:d6:50:92:
d0:fe:8c:e2:a1:32:b7:70:f5:40:97:f4:97:44:09:
1c:2a:73:1b:59:50:d6:94:95:7f:c0:28:db:17:80:
05:e5:04:26:f1:24:47:2f:cf:75:9e:31:53:24:33:
e7:b5:1d:46:dc:fa:90:96:bf:27:92:33:d2:95:5d:
38:7b:a0:cd:aa:e0:69:86:eb:67:fc:a2:3f:cc:57:
1b:7e:2b:e0:84:2e:dd:ae:fe:79:25:8b:2c:d1:72:
e3:9d:c5:6c:db:88:31:15:e3:f1:a4:6f:1c:fa:2b:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:2C:F3:AD:DE:E1:09:E5:AD:04:07:00:B7:B5:D9:D0:60:07:13
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5b:82:3e:c9:9c:2a:35:c6:d8:7c:8e:94:92:16:8b:db:7a:
52:5c:c3:6d:5d:0f:07:39:38:cb:72:5a:20:f7:b5:52:c0:b0:
97:16:58:3c:19:1c:0a:80:62:9f:d2:e2:e7:8f:49:f0:1f:61:
1f:f5:dd:31:eb:c1:f9:94:3b:2a:37:00:e5:f7:38:e3:7e:93:
da:a0:60:3a:9c:ec:74:33:5d:20:1a:b3:f3:60:68:cc:2d:a8:
64:c3:73:c6:0b:ec:32:bf:2f:01:97:e9:43:30:76:29:7c:c3:
6e:f4:bb:2e:6e:db:ad:1d:da:6d:15:e3:84:96:a3:d6:82:16:
0a:45:5f:bc:63:25:91:00:ed:ef:00:66:aa:a2:93:b4:c6:be:
7a:d5:e9:ad:f4:ce:d9:f3:d5:14:63:3f:bc:fb:b2:ab:05:c8:
bd:42:6e:4d:68:ee:c2:d1:3f:07:3b:cc:db:bb:65:02:15:a5:
b3:df:bc:7a:13:71:88:d8:0e:36:73:b9:cf:6c:6d:a4:eb:d6:
66:bc:fa:e9:59:52:c0:d5:f0:f5:69:4c:4d:a4:0c:1f:82:29:
0d:1a:d3:36:a8:0a:11:18:2a:46:19:c8:1f:fa:a3:c1:8a:78:
21:d0:4e:3d:0a:f9:cf:1a:d1:f5:54:ff:7f:ec:b9:9e:89:73:
3c:eb:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:48 2025 by rpki-client