Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: pn5Osm+iM1HKl4TEaK6YdKA87dZB/wMRIgS/y5fPS2M=
Subject key identifier: CB:84:0E:24:C5:99:21:31:0D:F2:E6:04:3A:96:C9:94:AE:B1:1F:3F
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 0198D472659899DAE25AEF4C46DF20624105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: c8X3HHiH+sWvOiAx13IivhAjKeM0SwtScs4nJxF9OFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:65:98:99:da:e2:5a:ef:4c:46:df:20:62:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=cb840e24c59921310df2e6043a96c994aeb11f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:f7:e2:df:4e:5a:47:8b:8e:83:40:0a:a0:
a0:14:75:8a:5e:2b:8a:4f:e8:9d:0e:70:e9:3e:87:
65:d6:51:c2:ce:ee:f0:c8:45:09:d2:4d:76:db:29:
df:e5:ba:89:6c:1e:a6:e8:ee:fc:1f:14:77:c7:09:
ae:30:30:d6:c4:33:35:68:5a:21:36:83:bd:31:d7:
c1:d0:b6:38:10:16:7f:50:d7:5b:2e:9d:64:5e:ee:
10:b3:e5:b0:26:06:e4:f8:09:5a:37:a0:ef:c1:74:
75:09:30:14:b8:00:bd:22:74:3a:09:19:a8:7e:a8:
f9:69:11:86:a9:25:27:cb:4d:e2:e4:4a:1a:a9:bc:
19:69:8b:eb:f7:e2:b1:ee:69:00:e9:94:4f:43:94:
aa:8d:e1:6b:1d:45:73:26:7a:ce:76:3a:8a:d2:1d:
5a:5c:65:9b:00:d9:2a:29:ac:86:5e:5a:ed:f7:79:
cc:a5:14:8c:c4:10:d4:47:13:cd:57:39:f7:b3:74:
48:9b:a3:6a:23:4a:92:10:ff:84:59:92:cf:72:21:
a8:7f:56:0f:f9:ac:13:d4:6d:d8:db:ba:06:65:01:
08:54:a6:12:a8:2d:a5:9a:ab:b9:e8:eb:80:e1:e2:
13:b5:e0:95:a4:b7:27:54:f6:6f:67:10:50:9e:99:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:0E:24:C5:99:21:31:0D:F2:E6:04:3A:96:C9:94:AE:B1:1F:3F
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:83:c2:44:97:00:ac:7a:41:c1:bf:90:d3:1b:26:28:7a:
f7:5e:43:3b:0e:45:27:dd:2f:11:e0:46:e0:5c:33:6b:95:09:
d6:ad:f2:a2:b7:23:18:3b:9d:32:28:23:ed:8b:89:66:77:00:
d7:08:f6:88:2b:b1:fd:8c:de:5d:c6:1c:8f:2f:b7:c7:fe:a0:
c5:a5:79:b3:7c:cb:0c:be:76:12:d3:e2:14:6b:06:8d:5c:1a:
22:2a:b6:4b:31:09:e2:c7:71:bb:96:e5:61:c7:91:2b:b3:78:
bd:e9:f1:7b:14:6e:fc:94:42:41:71:02:c2:9d:02:ff:b7:9c:
11:b9:33:61:a6:b7:fc:04:c3:00:91:c8:e1:fb:5f:94:01:16:
78:7e:f4:96:5c:01:53:75:43:b9:31:7a:f4:bd:68:4d:a2:d4:
b2:a9:69:7e:10:28:d6:5b:b7:03:72:0d:e0:7d:c9:ce:05:f9:
a7:0d:92:24:c6:12:be:77:6f:a1:6b:27:9f:74:e4:a3:5b:2b:
a0:a1:dd:14:62:cd:e4:f7:cf:8a:27:43:f7:5f:80:37:b6:2f:
11:d3:9a:b7:13:9e:10:04:cf:7a:03:d0:c2:d0:17:78:f4:0a:
9c:b7:f4:44:8d:07:ac:e1:ae:ef:84:b5:0f:00:c8:e3:94:46:
8a:94:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:26 2025 by rpki-client