Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: CTzjtD98HE6jMgr+iFBxDLEuWJCHLkXCH6VANNw4nV4=
Subject key identifier: 32:02:AF:7B:EE:84:CB:9D:F2:58:6A:5C:CF:84:61:3B:50:5A:92:14
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 0198D4729B70D64437C282AF563CC53959BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: /ASZLkm3aVXhASaK3Jl6DSLgK8N4mkrcAhCcdb0GxC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9b:70:d6:44:37:c2:82:af:56:3c:c5:39:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=3202af7bee84cb9df2586a5ccf84613b505a9214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:30:c3:70:5e:0a:0b:c5:f0:e9:43:d2:6d:
02:e2:f5:23:e8:c1:79:83:f2:55:c4:ca:8f:f9:1b:
1d:5e:76:d5:27:cf:7a:d4:db:99:f4:5b:8f:27:10:
b3:c2:f5:2e:72:9f:f0:68:3e:a5:44:35:2e:e2:0d:
a5:ec:2a:71:4b:fd:ad:10:48:8c:cd:b6:f9:56:e8:
88:c4:59:f7:19:07:7c:d8:1d:0e:a2:c3:60:c1:0b:
e2:b7:a3:13:bd:6f:d5:f3:05:20:ee:ae:fc:1c:c8:
b1:7f:76:8c:ab:7d:a7:e0:86:f8:99:42:cd:48:bd:
8c:e9:5f:f1:6a:8f:fa:02:a2:c9:51:2a:93:a6:0f:
ee:f3:e3:c6:94:12:51:37:ae:34:e2:f5:42:af:ce:
a6:7c:48:2f:97:88:a0:33:77:0c:15:4e:be:14:94:
ca:05:4c:ba:e8:a5:e2:97:e4:86:d6:a1:5a:ca:70:
9c:c0:75:0a:50:ea:9f:1c:b7:b0:77:cd:d1:32:e2:
8b:3c:dd:7e:cc:fe:85:fc:19:8c:ea:cc:c3:28:0f:
b4:5c:ca:46:3c:0a:75:01:01:e5:57:97:d7:35:8a:
17:ac:ff:4d:03:92:9f:7e:41:3e:54:18:9c:cd:2d:
a4:fe:6d:8a:a5:ab:72:52:3e:ee:5b:22:20:ac:9c:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:AF:7B:EE:84:CB:9D:F2:58:6A:5C:CF:84:61:3B:50:5A:92:14
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:aa:7e:e0:e9:96:f7:46:ea:48:92:87:62:24:07:d4:59:a1:
50:18:95:1d:09:80:78:2f:72:1a:11:70:a9:27:84:e5:44:17:
e2:d5:c5:09:93:8c:d1:96:43:2c:6b:c9:a0:96:68:29:b2:15:
d9:5e:b5:4c:13:f5:f2:79:bd:66:ad:64:80:c1:41:c1:64:0b:
ee:c2:63:93:46:4f:d4:be:4e:b9:5d:f2:88:ef:8b:8c:0b:8b:
a8:6a:66:02:91:a5:6b:f8:dc:7d:24:c8:21:97:67:e9:c6:f2:
8d:03:54:1d:38:9a:b3:b0:57:ac:1a:47:3d:f6:63:51:12:be:
7e:08:20:bd:41:e6:59:1f:07:6e:96:f4:48:3a:d2:23:ae:ce:
43:82:0a:d9:48:0b:ed:56:b5:1a:04:33:15:1d:dc:b6:b5:5e:
71:0e:59:3b:80:a7:d5:53:58:71:de:d8:d2:59:9f:42:d5:0c:
bf:bb:a5:cc:46:5b:06:68:81:80:15:65:30:60:bb:78:d3:f0:
58:7a:19:01:48:15:96:83:e5:b9:2b:62:0a:1d:71:2f:e9:19:
97:54:33:6d:58:6f:18:29:7f:c0:be:b6:a4:f8:dc:b9:e5:6e:
de:42:9e:60:c6:c7:51:49:3f:94:a2:d3:99:a3:7c:60:0d:37:
10:63:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:49 2025 by rpki-client