
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: cjkn1JcK2hmVCLIY1qy1ivr4G1GLWGZQFHwZUQeIvvk=
Subject key identifier: BD:27:E0:1C:D2:F9:52:5A:3F:25:95:DE:6F:EF:75:A0:52:F8:BA:4D
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 0197C425DD004C3F1D4CAEC3EC3DA85B3205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0EF0
Signing time: Tue 01 Jul 2025 04:01:45 +0000
Manifest this update: Tue 01 Jul 2025 04:01:45 +0000
Manifest next update: Wed 02 Jul 2025 04:01:45 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: kdYbuwFHSaiSFimPZLxTM0u9vZqnTmXsUg+R0fuRY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:dd:00:4c:3f:1d:4c:ae:c3:ec:3d:a8:5b:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Jul 1 04:01:45 2025 GMT
Not After : Jul 2 04:01:45 2025 GMT
Subject: CN=bd27e01cd2f9525a3f2595de6fef75a052f8ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:b4:f1:4e:b3:0c:6b:57:a3:ff:6a:a1:58:
b5:ca:b3:61:a7:74:a2:ee:e0:0a:de:4f:8a:c8:ae:
39:7c:39:37:38:a9:4a:b7:a0:c6:94:4f:e4:7f:a3:
8c:cf:a5:af:26:ab:33:0d:36:2f:c7:dd:97:0a:57:
ec:55:00:79:e5:9a:42:fb:c6:15:e2:6f:49:8a:ac:
2f:bb:f1:13:33:7c:eb:17:56:6b:3b:00:81:44:c2:
bd:f8:ee:f6:f8:d9:44:fb:02:10:35:e4:a7:65:9b:
f3:e3:46:1a:15:ae:81:a7:89:69:f8:b1:3a:47:5e:
6c:45:9a:63:e2:ea:8b:77:03:ff:8f:e9:78:b6:02:
c3:0b:ac:d9:06:2a:d7:d4:36:72:58:47:e6:a3:31:
ff:dd:bb:87:53:88:e7:98:14:a3:b6:c0:fa:86:ea:
db:dd:1d:6e:80:e9:be:15:3c:1b:17:d7:21:c6:5e:
9a:8e:5c:74:08:ed:4c:94:03:0a:ca:0c:29:c2:38:
2e:fa:52:91:f7:14:17:62:88:61:22:d3:22:40:36:
49:07:4a:35:07:a2:cb:14:c8:4a:d5:31:4a:32:e4:
67:56:19:fb:d4:0d:d7:ce:22:a0:3e:34:a9:b4:1e:
d4:34:01:b8:9c:14:7e:83:cc:82:44:4b:3d:0f:31:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:E0:1C:D2:F9:52:5A:3F:25:95:DE:6F:EF:75:A0:52:F8:BA:4D
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e9:1f:82:36:26:0e:98:ce:b8:f4:4f:f0:30:c4:86:e3:29:
d3:2f:b4:ba:82:3d:c8:e4:e6:bb:a9:ed:60:4d:c3:35:bf:70:
6a:27:e7:46:01:ba:2c:5b:f9:b9:d9:bb:19:b4:88:90:8a:d1:
28:e8:62:5f:7b:31:df:36:8c:ba:4c:fa:ec:14:46:f2:27:ed:
37:1c:2d:9f:e3:c1:4c:bb:92:f5:91:90:8b:6a:b6:80:10:1c:
61:a9:fe:9f:2a:19:f5:8d:f5:53:8c:65:d9:0b:35:ee:97:25:
8d:d8:70:79:bc:7a:98:6e:56:76:a7:9f:b8:f4:0e:12:5c:e4:
5b:5b:de:34:15:51:4a:8c:32:37:8b:a9:ba:50:48:a4:bf:3e:
ef:d4:90:93:27:f7:52:89:ef:13:f9:24:1f:65:a3:c2:c7:f8:
da:71:42:37:2e:16:74:45:a3:80:06:b4:9d:fd:bc:1e:78:84:
cd:43:3c:fa:81:cd:f1:9a:43:1b:89:8f:3c:01:e8:fe:07:38:
e9:07:07:19:b5:20:d3:43:b2:fa:bd:aa:ae:3a:e5:bb:14:a4:
ab:63:9f:4c:34:8f:36:65:cf:f7:03:bd:a3:23:00:99:28:ea:
e3:18:89:84:96:66:cb:5f:af:f1:df:a3:7a:b7:8d:9f:e2:ee:
87:93:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:47 2025 by rpki-client