Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: cWcEnytPavbh9MnicCJysy2wSwx7CU7gcNFm3VUKz6k=
Subject key identifier: FC:6D:B3:71:7B:EA:E5:FF:BB:2F:31:3B:C0:B3:8A:CE:71:23:1E:4A
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 0197B7B36CFFFDC6A034DC34C9E9CD5C7EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 1246
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: miM1g4Y+NNJReTMr+TyR35wswn36q8a1TnC2E1M5mCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:ff:fd:c6:a0:34:dc:34:c9:e9:cd:5c:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=fc6db3717beae5ffbb2f313bc0b38ace71231e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:ef:f1:b6:8d:31:04:03:00:58:1d:00:db:
2e:bd:69:66:97:1a:80:ce:a5:21:e7:4a:8c:00:34:
b2:28:a2:f1:59:5e:db:2b:9b:ab:de:36:dd:9d:22:
29:35:7c:27:64:9f:69:96:91:cf:44:20:2b:24:b1:
a0:af:d9:2c:2f:43:71:6e:a2:99:c6:df:29:5f:cc:
57:b0:81:6f:0f:9a:eb:fb:07:12:5b:6c:67:3f:6a:
21:29:bf:88:52:55:69:09:c1:25:96:db:35:ce:75:
85:95:dc:a1:1a:2c:e8:3b:9d:d3:8f:b9:9f:9f:b3:
7b:41:8a:d9:23:ce:e1:df:e3:2a:87:95:c5:80:e4:
d5:aa:80:7f:0a:05:78:9a:7f:5f:76:ab:11:fa:2d:
0e:6a:1e:25:71:ae:43:64:88:1b:e6:25:3c:c4:fd:
73:bb:25:5a:e5:05:c5:c5:ab:1d:73:66:ff:e2:31:
46:b8:98:36:95:54:63:7d:59:b3:36:0b:4f:22:45:
0b:2e:a3:c5:eb:80:6d:7d:8f:15:0f:6c:91:76:b1:
42:b9:27:d5:f4:de:ac:94:ee:b0:ce:7f:26:83:b9:
33:3d:de:93:69:d0:52:0b:fb:1b:f9:2c:65:6f:27:
c4:08:b8:3d:60:89:2e:44:3d:29:7a:09:8c:da:cb:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:B3:71:7B:EA:E5:FF:BB:2F:31:3B:C0:B3:8A:CE:71:23:1E:4A
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:8a:4a:c3:d6:cb:98:09:02:b0:29:36:27:58:79:51:c5:
70:60:4f:98:0e:6c:46:73:5b:17:6c:11:7b:4a:8d:d6:6f:cd:
f3:da:4a:c6:dc:b6:5c:4b:61:80:b5:9a:ab:6b:f9:0e:ca:19:
b1:82:d9:2e:bc:9a:ae:78:19:be:db:ec:b4:97:9b:d2:b6:23:
4f:0e:53:2d:c9:1c:13:21:80:27:ab:43:e4:88:11:80:4f:f9:
d0:5a:49:a6:28:8d:ce:26:42:30:19:e4:1c:bd:8a:f7:c8:dc:
64:24:00:55:27:9b:31:41:aa:8e:47:3b:d4:de:54:5e:32:73:
9f:7a:60:fd:ec:d7:5b:bd:44:11:b6:d9:b2:49:99:ad:d4:43:
9c:da:d0:47:ea:c2:62:68:63:42:c3:ea:cb:97:4f:0f:4e:a6:
8e:2a:1e:ac:17:d4:e9:94:bc:89:c5:3d:cf:c9:be:62:69:a5:
89:47:d6:2e:c9:f1:84:75:12:ee:04:ac:57:8a:2e:d4:f8:60:
46:ea:b2:9e:16:82:71:ef:8e:d0:88:dd:d2:99:84:d7:66:b5:
09:8a:f1:5b:2b:ae:ff:58:4d:cf:12:21:bf:91:ba:73:94:3c:
92:5c:c0:79:c1:ec:fe:d4:dd:6f:89:88:51:97:14:37:57:12:
08:cc:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:38 2025 by rpki-client