Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: cft60YkgEDh7hfoV/gCx+jIo7DDvpvqTYbtUsFyMprU=
Subject key identifier: 04:49:62:E8:89:F6:29:58:46:03:0C:D4:B2:DF:BB:35:5C:DA:50:BA
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 0197B6A157E766A7816FB681B3B82454B6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: 1ZA/S7iW4BLrLDgq609tJi8BZ5Oqf39r3bHnmpyc4hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:57:e7:66:a7:81:6f:b6:81:b3:b8:24:54:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=044962e889f6295846030cd4b2dfbb355cda50ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:c7:71:16:d5:fd:84:e8:98:45:ba:0c:38:
a7:4c:ee:cd:8b:cf:5d:5a:74:ec:3e:07:b4:50:73:
de:b0:13:a6:d5:8f:af:dc:80:4b:e4:78:42:cd:97:
fc:14:d9:70:12:c3:bd:7d:9f:b4:fc:70:b6:a9:ed:
19:bc:09:75:48:e6:b9:d7:26:0e:4d:72:21:58:bf:
14:45:6a:7b:23:a1:c9:62:7f:0d:30:ee:d3:4d:a9:
20:63:9f:b5:ad:b7:a5:d9:cb:36:a9:f8:a3:bf:f7:
9b:1b:eb:a2:db:7d:48:05:e1:2e:cb:5d:46:a7:3c:
d7:0d:05:98:70:48:2c:db:a7:1f:78:9c:a7:02:fc:
71:f6:ec:6b:2e:7e:15:49:12:62:52:0e:96:14:ce:
8e:ee:ec:6c:20:d5:24:7e:bf:c4:27:99:b4:e3:d9:
e6:b2:de:5d:5a:c2:d7:05:4e:d8:69:a8:68:e0:48:
52:bc:ec:5d:8f:3d:b7:62:e0:9c:55:a3:61:57:51:
1c:80:bf:b4:9e:2a:d1:47:7f:5b:dc:15:2a:1b:09:
d9:c9:09:19:b4:42:5f:17:9d:a1:8c:8e:81:19:a3:
07:2f:4f:35:92:0b:bc:04:97:5c:dc:f7:47:cc:b0:
35:1e:33:51:6e:e3:e2:64:98:23:f7:94:81:16:42:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:62:E8:89:F6:29:58:46:03:0C:D4:B2:DF:BB:35:5C:DA:50:BA
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:68:5c:9c:c5:ec:a9:aa:df:19:17:b6:3f:b6:21:9b:79:
a9:3d:a0:a5:ab:4a:3e:44:4d:17:37:79:83:5b:5f:5f:bf:ad:
2c:5e:c4:7d:71:f9:27:fb:48:ba:10:61:9d:cf:64:36:a3:e4:
b1:b6:21:6f:d1:22:c3:27:5b:b1:6c:1d:c7:15:1e:6e:6b:f1:
78:56:47:7f:77:eb:53:91:e0:d6:13:cd:a6:c3:db:e5:1d:0f:
e4:5b:f3:33:4d:fa:1a:14:c9:37:ae:ef:70:da:df:d8:c7:41:
73:8d:7d:8c:e5:3d:49:e1:87:27:c8:2f:26:11:e9:22:76:27:
f9:24:91:32:9f:ee:0b:67:16:b1:1c:21:75:04:65:77:a5:a5:
50:4b:b7:36:24:f9:37:c6:a6:53:91:79:a7:44:04:cf:e1:42:
4b:95:f3:03:87:c6:b4:13:99:b5:31:ad:a1:e6:5c:fe:8f:22:
b5:8a:bc:1e:cb:ff:14:a3:9a:b9:71:43:f8:6a:4a:0d:87:f2:
fc:76:3e:77:ae:12:a5:51:3c:cc:f4:b3:ca:18:bd:c1:db:5f:
5e:a3:6c:9b:37:a3:2f:30:53:83:ea:b4:48:95:53:96:1f:ff:
69:33:84:87:73:dc:77:e2:7a:95:2c:3f:7c:89:57:7b:c3:60:
29:c4:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:39 2025 by rpki-client