Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
File: LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json)
Hash identifier: odtAsfs0Fn63AvKbgVIZekrlI61tC1M5FJ+vr89DXPs=
Subject key identifier: 12:36:66:E0:6F:FD:6C:F2:FB:F2:24:95:4B:08:30:D3:09:1C:89:57
Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
Certificate issuer: /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Certificate serial: 0198D65F7373F1BB4088862829B5341FBBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: yZryVw32J2M200ydxzkSVVdGMNsO6qONfuLXYQIwrok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:73:73:f1:bb:40:88:86:28:29:b5:34:1f:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=123666e06ffd6cf2fbf224954b0830d3091c8957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:44:f5:75:ec:78:3a:ac:4c:29:12:8e:ea:
3e:c0:70:2f:89:01:6a:d8:40:b3:d3:0c:b9:2a:b2:
c1:01:ed:b6:d2:fa:e8:49:2b:a8:6e:41:46:8c:d7:
2a:0d:87:13:ba:b8:75:59:92:f9:6a:75:8e:ef:d1:
89:f7:d4:fa:59:21:db:70:84:ce:59:7a:97:5b:2b:
5b:b8:7b:85:8e:82:aa:af:61:a8:bd:7c:15:ae:91:
56:a5:32:2a:7a:54:7d:c9:27:99:5b:85:4a:f3:6d:
af:52:3e:ec:01:a0:25:35:a9:b9:01:e2:85:18:13:
f6:ed:47:a3:97:05:db:a0:ab:99:70:cd:69:2b:6e:
e7:a7:0a:33:4a:c7:71:05:00:15:b3:85:83:22:2a:
3b:39:31:e7:fb:15:38:7a:bf:e6:89:dc:47:97:61:
21:8c:ef:1f:ce:c1:4d:28:d7:8f:2a:69:42:45:bf:
c7:5c:34:72:cf:a0:b0:a5:2a:4e:26:16:67:0d:23:
d6:f0:22:db:f6:89:ea:b5:bb:82:2d:6e:10:a6:da:
55:b1:00:9e:ca:bd:f1:48:33:97:39:f2:96:bf:2e:
f9:4a:51:a5:5d:cb:6b:5f:1d:64:6e:79:5e:0c:b7:
91:cd:38:03:c7:71:bf:b0:64:fd:dd:5a:63:e7:5c:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:66:E0:6F:FD:6C:F2:FB:F2:24:95:4B:08:30:D3:09:1C:89:57
X509v3 Authority Key Identifier:
keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:af:93:db:94:b1:f9:6e:2e:7d:c2:8d:5a:39:05:9a:ce:6b:
c3:5d:7b:e9:7f:58:77:0a:09:68:58:5c:5b:20:d2:5a:a9:e2:
1e:d7:ab:1c:1f:f0:ea:d6:b8:a1:34:a6:88:f8:3d:46:85:9d:
62:59:9a:bc:fa:45:7f:34:c0:66:fd:42:33:9c:b8:d3:5c:56:
f5:73:a4:7d:a1:03:9a:cc:1a:53:72:a8:57:2d:a0:f7:75:7f:
2d:5e:bc:26:5e:16:26:55:07:23:d7:0b:a8:f4:a0:e8:5d:44:
59:c9:7b:4b:d1:fb:7e:ef:7d:68:98:f4:10:f4:65:be:1e:55:
01:30:0e:9e:93:34:b4:47:22:56:05:16:9a:97:c5:c7:8b:62:
bb:50:d8:cf:28:72:47:5c:a0:a4:6f:62:35:d0:ea:7a:22:cd:
ba:f9:ea:d7:5e:b3:c7:4d:a7:c6:3c:71:98:a7:d6:21:c7:55:
8e:48:80:50:d8:35:f4:0c:d1:ea:32:06:2a:f9:59:61:f8:4f:
f4:ed:0b:c4:be:ef:81:2b:bb:de:e5:26:06:b8:1d:d7:17:01:
53:dd:7c:d2:cb:2f:9b:21:a4:76:72:55:15:75:f5:b3:5e:b4:
61:83:83:02:81:17:ad:2b:b3:72:44:fd:81:00:28:ff:e0:f9:
6f:d6:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:44 2025 by rpki-client