Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier: EKhn/vCx1FUWgqnsz3ETCAU6x3dwxcAHugaO1It01pQ=
Subject key identifier: CA:1E:5D:B4:52:A5:33:6B:B2:E6:91:C5:E6:79:FA:CF:D5:A9:C1:0F
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 0197B745364146B0B698AC7E2BA9151D4DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: IczGt/u/ZEwDhSPNJIh2GOIVJEspIvF5Wjh5ItPaRCs=)
2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:36:41:46:b0:b6:98:ac:7e:2b:a9:15:1d:4d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=ca1e5db452a5336bb2e691c5e679facfd5a9c10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:80:08:8d:25:b2:db:83:48:5d:88:4f:48:
75:82:18:a1:00:b0:74:7f:72:df:8a:fc:f4:98:6b:
a9:e8:48:21:8d:8d:b8:e5:dc:25:36:6a:5b:4d:45:
a3:ae:bc:a7:ba:24:de:ad:88:ee:90:a6:71:8a:66:
be:2c:d1:c1:6a:be:a0:f7:84:92:78:dc:ea:5a:52:
08:79:b8:62:b2:01:23:c5:3a:3f:8f:93:38:2f:64:
5b:2a:7a:0a:20:cb:5d:32:6b:3e:45:22:ba:cb:10:
6c:d5:fb:9f:74:f9:b6:2f:53:6f:c5:bf:ea:8e:00:
73:4e:f2:d7:53:0b:72:3c:b9:00:74:7f:f6:6e:4b:
b2:be:7a:4d:5e:14:a8:88:59:30:0f:56:12:8d:f1:
f9:e2:7b:65:6d:dc:2d:f6:68:30:8f:7d:cf:4b:f9:
bd:19:8c:1e:d0:fd:1d:5b:74:d9:c2:37:18:02:36:
b1:82:ac:ed:68:cb:16:8b:ae:3e:03:1d:a8:d1:68:
18:68:49:e2:e5:b4:43:7d:6b:75:89:84:3c:a0:16:
76:2e:d8:16:b3:c9:96:4e:4e:ac:41:11:eb:ea:0f:
31:8d:2d:14:47:cb:96:6e:d6:8e:7e:93:a5:e7:67:
3c:c5:d0:ad:34:c8:81:b0:e2:5d:a7:94:b3:4d:95:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:5D:B4:52:A5:33:6B:B2:E6:91:C5:E6:79:FA:CF:D5:A9:C1:0F
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6e:61:d1:7e:34:90:13:a3:63:4d:37:6b:40:90:fa:ea:3d:
70:de:19:1b:59:c0:af:aa:9a:75:ee:bf:e0:32:c0:93:6e:a9:
17:96:bb:31:27:f1:39:89:f7:ba:cc:34:a4:c6:ad:ba:ed:c8:
1c:4c:98:1b:15:1e:5b:09:e5:2e:4c:64:4b:e5:ce:1f:a9:19:
00:3b:cb:97:c0:f7:e0:73:00:de:37:19:29:dc:75:a1:16:51:
b8:4d:53:08:85:75:91:da:ad:4a:29:10:ae:1a:d8:1a:00:bd:
ee:d2:f5:cd:e7:a6:e9:eb:c9:65:55:65:d1:9f:66:90:c1:79:
a3:da:9f:35:6d:1c:c0:5e:b4:b9:fb:01:3b:f5:13:8f:c1:37:
96:47:8f:58:b2:bf:9f:d7:97:23:43:85:42:c7:e5:4a:a1:eb:
80:31:73:20:27:b8:b3:10:c9:3a:2a:fe:95:37:e0:db:89:41:
6f:24:04:11:ca:d1:47:61:ee:45:c7:6a:5d:89:ed:7a:2e:41:
a7:8f:c3:85:c9:81:be:34:3c:00:28:97:e3:9d:28:da:ff:e4:
fc:cd:c4:50:a3:99:2f:04:f3:82:0f:20:db:86:ca:99:30:b2:
8f:67:7c:a9:e4:10:30:0a:6f:5b:56:79:41:a0:fb:b3:07:5f:
6c:69:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:31 2025 by rpki-client