Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: rAmTan7exMOets4qzvf29ZhnRPV6zeEfwX1+WyuHzBw=
Subject key identifier: 34:F0:18:89:F5:DD:E4:BC:A8:94:60:65:53:4C:21:39:AB:54:78:6B
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 0197B5FBDFBF3D4AE88D24E3702533E3DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 0621
Signing time: Sat 28 Jun 2025 10:01:12 +0000
Manifest this update: Sat 28 Jun 2025 10:01:12 +0000
Manifest next update: Sun 29 Jun 2025 10:01:12 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: XO/nTJIJXXyChwYzEBMd1G4PbYLUyMT8ZhGHJqat5yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:df:bf:3d:4a:e8:8d:24:e3:70:25:33:e3:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Jun 28 10:01:12 2025 GMT
Not After : Jun 29 10:01:12 2025 GMT
Subject: CN=34f01889f5dde4bca8946065534c2139ab54786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:c0:7d:a0:2d:50:9e:b5:29:46:5b:32:c0:
c9:62:e6:e0:7c:23:7e:77:aa:f9:36:86:07:f0:80:
f4:4a:54:5d:72:16:f6:18:37:8f:c8:50:38:f8:9b:
71:36:e1:b9:29:0b:dc:f1:72:cb:ac:d5:5a:52:5d:
de:09:38:8a:23:19:8c:24:6c:9d:ab:5a:b1:9c:b6:
c5:1e:20:49:ba:23:bd:49:fd:26:51:86:8b:76:e7:
c0:58:66:6a:00:b5:f1:bd:6e:91:25:42:aa:cd:2f:
8f:8c:91:47:86:db:9a:81:5b:0e:4c:3e:24:c7:9f:
68:de:2b:46:3a:4f:09:a4:1d:2b:c3:51:c5:50:ed:
ab:f0:b3:58:18:6b:70:e8:58:82:c3:e9:2c:04:3a:
4c:59:7e:c0:54:2d:66:4d:1f:cc:ba:6f:f2:10:f2:
21:ef:fe:aa:00:45:2c:c8:57:56:af:ae:96:20:33:
2e:53:f8:b3:10:6b:0c:66:f9:6c:51:13:07:fe:63:
c3:ae:e1:63:6d:7a:53:10:1e:39:ba:ad:cb:af:b4:
79:ce:08:8f:2a:15:78:dc:f3:a5:f4:b5:ec:75:6d:
d5:75:14:e2:2b:4a:7e:31:ba:30:ae:1f:cb:e0:10:
29:04:3a:89:c6:c0:8d:46:c3:2f:f2:0d:05:9b:f1:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:18:89:F5:DD:E4:BC:A8:94:60:65:53:4C:21:39:AB:54:78:6B
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4d:c2:eb:da:31:f4:33:92:e2:14:56:2a:99:01:e2:33:df:
ff:38:19:bb:79:54:72:c7:af:49:3b:5c:47:cf:b6:60:b5:00:
33:66:81:18:e3:3c:aa:54:36:19:85:8a:5a:f2:db:6d:7d:7f:
32:c8:06:03:00:6f:b9:3d:87:55:a2:34:7a:0c:39:76:82:9d:
86:b7:0d:59:80:ff:7d:cd:4a:e5:2f:0c:a2:e8:38:42:2f:d3:
1a:af:f9:de:d9:bb:2b:e0:c9:c1:79:1e:5c:47:7d:ca:41:f9:
a0:5e:00:fe:fd:a4:44:60:b5:86:55:65:06:38:a6:9d:f7:10:
98:a5:ba:69:93:f2:f0:b4:3e:92:4b:7c:50:47:09:2b:37:34:
3f:54:01:24:b4:da:29:85:61:fe:34:70:c4:02:ef:6c:c2:59:
b9:45:a1:7b:44:ef:bc:4c:a4:82:fd:ea:d3:c7:12:bc:d7:a8:
3b:cf:d8:d3:18:4d:a0:34:26:5f:a4:f1:74:b6:08:14:41:c2:
f9:c5:f4:d7:d5:a8:bc:43:a8:b0:ad:87:65:46:7a:3c:36:36:
de:ea:6b:77:9f:ea:fd:20:a9:94:c9:ec:2d:1b:05:2d:5a:1f:
3d:2a:bc:74:84:9f:90:af:d6:ff:93:ba:fc:a4:99:dc:88:4d:
2e:4f:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:43 2025 by rpki-client