Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: 2oIdEdmkplSm3MuMwpnM0rFB43QQxpDHdSmy1DdwfxM=
Subject key identifier: 1E:44:7A:51:F8:6A:69:A5:8F:3B:B5:01:63:99:E6:34:11:30:99:20
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 0196C8719C897AD3DFF49B25B35B98DAEFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 11CD
Signing time: Tue 13 May 2025 07:00:10 +0000
Manifest this update: Tue 13 May 2025 07:00:10 +0000
Manifest next update: Wed 14 May 2025 07:00:10 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: nlpJtuMC0PSqOZ7633XAdGCqopB5YL8k0i0D4HlndcE=)
2: f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (hash: gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:9c:89:7a:d3:df:f4:9b:25:b3:5b:98:da:ef:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: May 13 07:00:10 2025 GMT
Not After : May 14 07:00:10 2025 GMT
Subject: CN=1e447a51f86a69a58f3bb5016399e63411309920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:9f:31:39:00:ae:7c:0a:5d:5a:31:ad:ff:
6f:a3:a7:75:d8:69:3e:a8:6c:08:55:26:f0:07:4a:
10:00:22:3a:08:64:01:2c:12:06:32:d3:72:c6:a3:
f7:34:89:cf:50:fb:e2:2b:98:be:a0:12:03:5b:29:
3a:4f:78:64:52:6c:4c:00:92:dc:a2:28:03:89:89:
c8:31:ba:60:11:41:11:0f:ae:9e:6c:02:44:d7:7a:
6e:42:d9:5d:5e:a4:69:98:d8:41:eb:20:aa:ab:74:
f1:fc:15:f5:f9:74:f2:8c:38:e1:ad:cb:da:d1:18:
5e:59:4a:db:75:f7:88:ac:4e:51:b4:96:84:7b:f8:
09:be:15:b8:89:f7:c6:53:7a:96:b3:f9:46:01:69:
5e:70:03:4d:bc:0a:88:84:4e:c8:7d:17:d2:04:51:
8a:37:a3:e0:40:61:4a:0b:34:cb:e4:94:b4:45:b8:
9e:aa:5e:bc:96:87:6a:a0:bd:b0:b6:31:9d:69:6d:
b0:5f:96:90:8b:15:33:f5:39:11:b3:1d:77:5f:d5:
4f:03:f7:41:6a:3d:03:fc:69:16:97:be:16:f5:a7:
3d:de:55:05:55:ff:d9:93:e5:d4:f4:9c:bb:d0:46:
f2:91:74:bb:b1:68:15:23:29:39:e2:00:f9:2a:7e:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:7A:51:F8:6A:69:A5:8F:3B:B5:01:63:99:E6:34:11:30:99:20
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:d0:4c:22:84:e6:ec:4f:87:44:51:a7:e8:e2:e1:81:6a:
cf:58:9a:41:51:e1:13:53:e3:bc:41:e7:5c:08:f5:e5:1b:72:
f0:f9:08:91:ca:3e:a5:fa:77:75:cc:29:e5:b7:7c:14:a6:d1:
1a:d6:90:9b:a2:ac:91:ef:0f:d2:9a:ec:a0:c3:24:36:fb:bf:
cf:b5:c9:75:81:d4:3f:87:2a:ea:b4:a4:fe:92:ad:2b:14:16:
11:f0:a5:d2:25:8f:a0:3d:ec:f3:e1:cf:26:f1:8a:fc:1c:cc:
01:a0:5d:c7:63:6e:89:6f:d4:1c:aa:a6:c7:26:b2:4c:15:06:
23:b3:de:a5:6a:01:b6:53:d0:06:ae:f3:fe:e4:0c:44:69:37:
71:5e:67:08:cf:f6:dd:85:b7:fc:2f:4a:f4:5e:01:f6:89:a5:
3a:26:4c:75:e6:67:31:e7:34:e4:44:20:ee:81:00:61:3e:22:
22:a6:c1:dc:76:47:32:ac:33:6e:01:db:bd:5a:97:db:24:7d:
32:a0:4f:d4:f8:9a:ea:7f:30:3c:1e:7b:cc:ba:7d:f0:0f:52:
8e:d2:af:bf:40:68:7e:35:21:a0:12:0b:cc:4c:54:12:12:34:
b1:d4:52:fe:3a:99:37:3b:42:ee:c9:4c:88:6a:b1:74:45:cc:
fb:84:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:23:44 2025 by rpki-client