Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: oFzkV9bxw+IaymsBIcPOK5UlatYDEYJY8o/gqrQfDYY=
Subject key identifier: C7:B9:FF:84:B7:33:7C:24:AF:82:F4:32:DC:DF:EF:7C:67:11:57:2A
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 0197B5C4D08B4C4010AE23B65307DC50A7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 0596
Signing time: Sat 28 Jun 2025 09:01:03 +0000
Manifest this update: Sat 28 Jun 2025 09:01:03 +0000
Manifest next update: Sun 29 Jun 2025 09:01:03 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: hdCNCsgmjXRfldTCpFwiQzlCsWqBnugA9XCg2BfYfgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d0:8b:4c:40:10:ae:23:b6:53:07:dc:50:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Jun 28 09:01:03 2025 GMT
Not After : Jun 29 09:01:03 2025 GMT
Subject: CN=c7b9ff84b7337c24af82f432dcdfef7c6711572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:fa:f2:fb:d8:e9:10:45:b3:73:3d:1b:ec:
7a:77:e8:a0:a8:9f:56:2a:39:05:9d:cb:0c:43:f8:
54:73:e9:9c:7a:77:17:13:ee:83:0c:ac:d6:1f:37:
9c:cb:45:53:3e:db:df:e4:2f:c1:87:c9:59:2d:c6:
c4:f7:31:18:21:ca:61:fc:5a:01:b4:9e:2c:02:cf:
ed:c5:28:da:a8:60:02:7e:7f:ca:20:a4:00:18:0c:
f4:05:74:38:e5:49:94:f2:68:78:5f:03:82:05:21:
15:cf:ce:a5:31:40:e7:de:50:d6:c9:cf:98:91:c2:
4a:98:f8:06:a5:94:42:a5:e6:84:50:87:ac:6e:b3:
a0:99:ec:35:71:1a:b6:07:79:f5:5f:0b:16:e7:f7:
30:9d:69:a9:f1:73:57:78:f4:1c:c9:06:72:9f:aa:
0e:a9:fc:4e:6c:ee:3a:5e:3d:c7:fa:f0:18:7b:64:
6f:1f:24:31:29:0d:93:51:05:93:64:94:1d:2e:c3:
ef:17:3b:fc:0d:3a:bf:c0:3e:41:dd:c4:e8:20:10:
97:9c:69:62:0d:9c:e6:4b:61:1b:97:e2:40:18:ff:
08:af:fb:dd:59:70:12:6b:fa:21:8c:1b:44:ef:f1:
58:f5:ad:0b:1b:25:b5:73:1a:7c:62:da:d2:c5:b0:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:FF:84:B7:33:7C:24:AF:82:F4:32:DC:DF:EF:7C:67:11:57:2A
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:32:fd:21:a4:5b:42:a4:cc:c2:01:9b:85:7a:0b:b5:98:
8c:a2:8f:f9:71:1d:ed:33:03:59:93:46:cf:e7:15:f5:be:36:
ae:ed:65:c9:63:ff:64:b5:a7:25:f8:5d:00:5d:7b:bb:c7:fc:
09:be:57:bf:e8:52:42:21:c4:69:06:b4:cf:31:28:d8:cd:8b:
dc:1a:ca:2a:b0:5c:a6:4d:35:49:fb:c7:79:02:57:ae:2a:27:
56:72:6d:35:a9:1a:20:54:fd:11:5c:fc:2c:d1:fd:c5:29:60:
3c:36:c9:2d:04:c7:9e:f8:7f:7c:3f:07:ca:85:ad:6d:56:63:
cf:c8:32:90:16:61:5b:a6:15:9d:ea:60:3c:0d:c1:b2:dc:5f:
1d:0a:4e:34:83:3a:04:30:ce:23:dd:e4:47:04:f8:cc:d3:07:
ce:4b:db:05:17:e3:12:71:19:97:63:1c:f2:3c:2e:10:ea:7d:
51:7f:f7:09:7b:71:18:ed:fe:57:ed:66:13:80:ea:28:01:2c:
84:e4:ec:5f:17:85:46:91:b6:3a:d5:43:1f:33:bb:5b:d7:d8:
ac:bd:8d:af:7e:40:51:eb:1d:9a:de:6f:2d:cd:a8:a3:3d:f2:
1d:1d:70:4d:18:45:56:ea:19:cd:1f:55:d6:0d:7e:7b:50:8c:
5f:6b:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:03 2025 by rpki-client