Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: INaoEHCIgwpJ6G+2RNWS4wjFFfL/tpB9fJNISSEO+qI=
Subject key identifier: DF:CA:32:FE:72:C4:D9:B4:1A:6D:DD:C9:C0:21:AD:20:A3:4D:62:FA
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 0196BB92FF2788A6A41D5CFDDFE98BE47FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0E67
Signing time: Sat 10 May 2025 19:01:34 +0000
Manifest this update: Sat 10 May 2025 19:01:34 +0000
Manifest next update: Sun 11 May 2025 19:01:34 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: bULh6ZPfYa4XTsUP7AEumiBqwPX78Wg5Nstg1U8W8GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:ff:27:88:a6:a4:1d:5c:fd:df:e9:8b:e4:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: May 10 19:01:34 2025 GMT
Not After : May 11 19:01:34 2025 GMT
Subject: CN=dfca32fe72c4d9b41a6dddc9c021ad20a34d62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:00:00:6a:34:e6:1b:6a:fe:2c:4e:4b:8b:
ad:1b:69:53:37:f8:65:88:1a:ef:ef:fd:1f:62:04:
0b:e9:48:91:6b:5f:86:0f:a2:58:13:76:93:3a:b3:
d6:28:a1:b4:dd:2d:f4:69:fe:3a:11:a4:62:05:51:
ee:83:0f:6b:3d:6b:07:26:a5:bd:b7:f3:3f:f5:d6:
09:eb:6d:8c:01:de:3f:7a:e7:ce:65:4b:b5:a1:b6:
72:bc:56:4c:62:a7:2b:33:65:1b:3e:d8:02:2d:3f:
47:55:25:22:99:e2:2e:5b:a3:6f:1b:b2:61:cf:ff:
60:84:e2:ba:eb:dd:e1:c0:bd:84:8b:74:3c:3e:f1:
be:9e:86:dd:05:24:cd:dc:3e:a6:6c:72:05:0b:85:
e5:8f:8d:67:67:24:17:ae:91:7e:18:19:1f:b6:c8:
6a:ce:00:5d:c8:5e:4a:09:76:15:a3:c9:0f:41:e1:
f5:47:aa:2e:2c:c4:9b:62:ba:ae:93:c3:f9:48:18:
bc:c2:bf:e3:db:1e:19:91:f6:ba:93:ca:98:04:25:
08:ac:e7:ea:31:cf:4a:c5:71:9c:df:e5:71:53:9e:
fb:ab:9b:5b:d8:09:4c:29:a6:6d:fa:a8:2d:e8:5d:
28:c1:c4:b8:92:49:e5:f1:fd:f2:e1:96:6a:d9:1d:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:32:FE:72:C4:D9:B4:1A:6D:DD:C9:C0:21:AD:20:A3:4D:62:FA
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:95:8c:0e:26:8f:b0:96:a9:9b:e1:2e:16:05:fc:66:4b:83:
f4:bc:92:fb:2f:80:c4:33:f1:20:3a:9b:b3:51:38:14:72:9d:
47:ca:16:6e:42:89:74:b9:7a:57:c6:27:5d:b3:13:bf:6b:57:
f5:1a:70:79:0b:0e:f7:ca:fb:ae:10:55:79:ed:67:7e:e3:cf:
c5:a9:8e:e0:e7:ff:b0:4d:7c:63:80:c3:52:46:47:14:0a:e0:
32:ff:11:75:ba:f4:09:27:5e:cf:d9:db:7f:d7:06:46:d2:b3:
64:ed:74:9c:9b:06:27:85:3d:2c:c9:f6:c7:fe:70:06:16:4f:
3e:e1:a0:59:55:a0:88:1f:3e:bc:a7:cc:09:38:57:e8:99:a3:
6d:16:80:99:e2:01:68:c0:51:ad:9f:28:b1:d3:9e:9e:12:bb:
f0:0e:45:1e:8c:00:6e:55:c1:a7:b8:7b:13:a4:99:08:4f:3b:
2b:77:41:cd:86:9d:cb:13:8e:dd:3a:14:a3:d4:69:2d:6b:9c:
e7:d9:b5:11:c8:70:45:88:ea:b5:25:2b:8a:c4:f3:33:71:07:
29:da:6c:6b:10:ad:1d:80:f8:77:08:e4:05:0f:fc:dc:d9:e7:
13:d3:db:21:cf:9b:01:47:4b:d5:07:d2:e3:67:f6:ab:ed:51:
e5:47:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:31:12 2025 by rpki-client