Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: g2Viq6yJ8UUxLtkjLCwPVDGsBgm8oqnHnMjXiGuzeKM=
Subject key identifier: 1A:65:B6:62:88:0B:26:8A:8F:93:05:3E:3E:35:C2:8D:08:9E:FA:B1
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 0198D65F5FDF4176D87C3A0C2627B703C545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 15D6
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: EMz6lFTmVifIY3XBOqhY6qxqMe/ysTfdctOmvQ4iC8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5f:df:41:76:d8:7c:3a:0c:26:27:b7:03:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=1a65b662880b268a8f93053e3e35c28d089efab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:d8:93:bd:dc:8f:40:84:92:2d:92:76:3d:
3e:a8:3f:7b:e3:9f:72:54:28:ae:1d:e8:63:91:7f:
fb:4b:60:36:fb:2e:5e:e0:c8:5d:a2:a8:89:e2:5a:
59:f6:a2:6b:c2:ea:14:c1:75:23:a5:b8:00:8f:a1:
5c:41:2d:28:22:47:bc:a7:c4:f5:70:25:e7:8a:04:
a4:91:28:7c:92:f4:36:56:ad:89:b1:fc:b1:71:16:
b0:73:09:15:20:dc:66:6d:78:d3:1d:19:35:e3:91:
a2:fd:3f:4f:12:f3:75:3b:b7:ba:52:3f:8e:12:5d:
23:7d:08:20:4b:c9:23:1c:cb:64:16:76:c0:63:99:
fb:53:5c:57:8f:4e:4c:d2:fa:01:76:29:e7:6b:63:
ff:c0:46:87:51:33:d9:a3:3b:7e:bd:8d:c4:7a:5e:
36:26:1b:6c:b0:bf:b6:59:bf:cc:8e:ba:a3:12:b4:
a7:d6:8d:a7:91:b7:b5:48:4b:c4:62:b6:db:db:82:
96:5f:12:57:1e:c8:db:3b:28:aa:c3:3b:7f:6d:20:
46:91:b4:9a:30:6a:47:01:d9:81:ac:2d:cf:4d:6e:
f8:41:50:0e:08:60:4d:0f:cf:47:35:d2:a0:70:91:
98:7b:49:30:de:19:65:4e:c6:70:0a:b3:df:bd:f2:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:B6:62:88:0B:26:8A:8F:93:05:3E:3E:35:C2:8D:08:9E:FA:B1
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:44:c5:eb:97:12:ab:7a:b5:b8:15:c0:54:83:03:46:d8:8d:
c0:cb:27:f6:21:5b:0e:14:a6:45:5c:f2:86:01:52:96:c2:34:
f3:ae:c1:3d:db:75:fe:7d:d9:d0:06:da:f3:5e:cf:50:a2:1f:
ea:fb:61:75:04:86:ca:9b:55:75:c0:a7:25:1b:b2:74:66:ee:
8b:69:30:ed:9a:d1:96:89:d8:10:48:f0:09:74:e9:bb:be:27:
06:92:fc:f7:d7:98:64:6f:c1:02:98:8b:89:6b:f3:59:9c:6e:
cd:62:ad:41:68:cf:69:19:f8:95:cb:9a:9d:50:eb:0f:f0:a0:
bf:9d:38:10:ba:65:96:8d:33:84:dd:c2:fb:25:f8:71:60:27:
56:8d:18:6e:a7:9b:37:59:f2:20:80:b3:f0:5a:d6:cb:7e:28:
b9:74:b6:6b:51:bf:bc:1a:09:d4:89:41:04:5f:02:3b:cf:4f:
79:02:98:b8:2c:30:8a:c3:19:77:f9:f5:ff:ff:4d:65:56:c3:
43:2a:f3:7d:43:bd:34:9d:5b:af:e1:9f:0d:61:db:fe:d8:0e:
2b:14:06:87:73:ea:c8:9e:33:e0:99:14:3e:f2:30:c5:5e:2a:
eb:30:9c:8d:c1:34:b8:26:4e:44:99:73:72:74:e7:a6:7c:88:
9a:a0:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:32 2025 by rpki-client