Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: +eR+D6SJ7lIaw3h+g5OzU9A5elVIlA081sNQq5OyIVs=
Subject key identifier: A6:36:51:F3:05:82:E6:1F:FD:F2:E5:35:75:CD:69:5D:D1:F6:0B:67
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 0197B6A12E41A18E21E4092A7BA7A9DDB2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 084D
Signing time: Sat 28 Jun 2025 13:01:45 +0000
Manifest this update: Sat 28 Jun 2025 13:01:45 +0000
Manifest next update: Sun 29 Jun 2025 13:01:45 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: B3KDVR0i+PHLwo2CU4Yb4UvLg4v30jwqWAb6D9UnaC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2e:41:a1:8e:21:e4:09:2a:7b:a7:a9:dd:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Jun 28 13:01:45 2025 GMT
Not After : Jun 29 13:01:45 2025 GMT
Subject: CN=a63651f30582e61ffdf2e53575cd695dd1f60b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:07:78:49:47:73:b0:e0:9d:3a:82:a4:61:
5b:4d:7c:d9:0e:e3:b4:0b:c0:dc:a8:38:fe:43:ba:
1f:ce:88:4f:24:51:14:51:a4:ae:43:88:00:4c:b0:
51:0c:9d:76:34:86:fd:2d:bd:1b:fc:44:8f:b1:60:
ef:b7:98:df:9f:ff:25:76:56:0c:23:f1:e7:4d:50:
78:10:e1:92:38:49:b1:6b:e2:f0:bf:96:cd:1d:cb:
c6:c3:23:a0:4e:bb:a5:32:b1:45:96:ae:12:63:fd:
46:19:01:14:b0:b9:71:8c:99:f1:2a:b1:45:2f:4b:
30:fc:bc:14:be:cc:5f:79:da:6e:ff:95:c6:55:17:
d3:f9:65:77:9f:8f:05:79:86:8e:a5:ec:1a:36:7c:
92:d3:ba:25:cf:d6:16:15:52:f4:fe:ef:16:83:37:
9b:0a:59:b5:02:80:60:4d:b6:84:8c:70:e1:bb:b8:
6c:c8:2a:96:5b:af:12:64:67:3f:9c:7d:9e:9f:09:
85:d6:d7:dd:c5:e1:79:99:b4:e1:13:1a:27:e2:d1:
68:2d:ab:9b:c9:79:4a:94:eb:e1:3d:fc:5a:d7:a1:
38:1f:fb:ef:f4:40:a9:7f:12:dd:42:02:83:5a:cd:
7b:07:84:4c:55:cb:44:78:83:fc:6f:7e:09:db:a5:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:51:F3:05:82:E6:1F:FD:F2:E5:35:75:CD:69:5D:D1:F6:0B:67
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6d:8e:26:86:f5:32:cb:d3:bc:91:a4:fa:a4:6e:de:0c:77:
a4:a0:b4:fc:25:b3:ef:93:79:dc:d9:c1:b4:c7:3c:90:45:6b:
76:bc:d7:02:3b:83:c7:dc:c6:30:57:56:d2:1b:45:a5:4a:d7:
46:93:4e:b1:3c:6c:7b:2d:97:58:b4:d9:81:66:9b:3b:0b:33:
3d:1a:08:36:67:f6:04:d5:74:79:49:b0:1d:91:f1:5c:51:81:
33:69:d9:ea:93:fd:bf:ed:66:7a:b8:2c:4c:44:75:4b:5a:44:
55:29:8a:7a:44:6f:f9:e0:45:1d:e0:94:a4:2c:61:7b:ed:47:
2f:ad:1d:92:fa:c1:d4:a0:e0:38:90:44:6c:78:48:1e:02:e1:
e9:2f:db:96:02:e1:46:cf:c7:2f:2d:f8:01:64:96:5f:bc:d8:
49:9b:34:20:df:ca:4d:04:d3:38:45:40:ba:d9:ca:3e:2f:f3:
0f:82:b1:e5:a3:8d:6c:5f:ae:2c:16:05:97:91:ee:84:6f:0d:
3b:c1:8c:e2:97:27:8a:0b:52:1e:3f:1e:97:df:cc:d9:2d:3d:
2b:7e:62:cb:76:55:61:79:fe:2b:78:89:92:64:52:48:bd:61:
de:35:da:e7:3c:10:09:70:84:51:8b:f0:6f:fe:c3:45:db:06:
da:59:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:26 2025 by rpki-client