Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: lfVNsLZFXcTgTQIqSu+A6Wi38tBkcYXbJE185QV5LxY=
Subject key identifier: 37:63:6C:C3:46:57:B1:AB:DA:7A:0B:BD:6F:B6:74:D6:78:C6:D9:E2
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 0197B6A087C1D4AC523E5A91F473AD3C1765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 1081
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: ASulx8B4aq/BHk9S25nyazcidozZ/ASJgXhGpVgvcLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:87:c1:d4:ac:52:3e:5a:91:f4:73:ad:3c:17:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=37636cc34657b1abda7a0bbd6fb674d678c6d9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:e8:aa:df:af:90:71:eb:24:4e:99:41:52:
74:6e:d1:9b:d3:8b:76:50:71:a7:43:2d:aa:56:63:
d2:f8:41:c1:24:15:c1:21:25:14:ff:48:a6:f3:1e:
bb:4d:5f:b3:07:c0:f2:90:10:9e:b4:08:32:44:97:
ec:fd:68:d4:4b:fb:b5:c6:e9:69:17:c4:09:72:dd:
71:28:78:05:41:b7:f7:74:a4:75:00:84:72:04:f2:
2e:31:b5:5f:bc:f5:c8:06:e2:9a:52:cf:17:16:89:
bd:df:a3:c8:c0:e6:a1:65:92:27:a0:d9:e7:70:5e:
4a:6c:d6:c2:61:c2:5c:6c:93:2d:a9:f4:f5:36:c8:
9f:eb:be:01:88:09:63:12:8c:e8:ba:8f:a4:fa:82:
a4:9b:1a:4d:4a:80:16:e9:7a:6b:8f:fa:7d:8a:13:
54:50:eb:89:94:7b:be:64:f6:ce:7a:90:0f:64:4e:
53:ff:d2:90:fe:cf:64:e3:f1:2e:e5:e0:2f:5f:44:
cc:58:39:a4:2a:e8:5a:ee:f0:cd:bd:05:56:93:d8:
61:cb:c2:54:49:fb:fe:99:bf:d7:01:12:81:fb:71:
b1:73:d5:50:70:01:2c:12:2b:4e:07:69:c0:65:20:
ac:c7:ac:f8:72:b7:42:f1:6c:53:fc:9d:e4:c8:11:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:6C:C3:46:57:B1:AB:DA:7A:0B:BD:6F:B6:74:D6:78:C6:D9:E2
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:f9:2d:8d:c5:d0:38:11:a9:25:e0:c6:87:6d:14:cf:97:
6b:6d:f9:ee:5d:5f:c2:d7:41:14:8f:4d:0e:dd:26:75:24:68:
ac:53:3c:db:76:76:d2:fc:b2:a3:e4:34:07:1a:b3:cd:72:65:
76:ec:a8:62:65:e5:c9:31:67:f5:27:95:96:fa:66:79:ff:1d:
26:38:8e:da:79:1f:68:10:51:67:28:e8:b4:ad:37:6c:7a:42:
d9:77:26:c2:a5:23:56:3f:38:f5:31:7a:42:b8:e1:98:e2:55:
c4:ec:22:ec:e4:68:23:51:f2:4b:04:8e:3f:75:d3:25:c3:d5:
38:36:98:05:24:eb:1c:c2:f7:e4:4c:05:d1:99:45:b9:f3:f0:
6a:7b:8d:97:f8:f4:a2:3e:95:df:6b:00:56:67:e9:c7:b7:96:
9a:4c:38:3f:71:89:5d:e4:ea:56:d9:ce:35:b5:d2:b6:e2:ce:
ef:dd:bb:60:95:73:01:aa:ee:a2:a2:76:ca:15:cf:93:43:6d:
44:06:ab:3a:72:db:f4:d4:35:4f:5f:0d:94:d8:94:d9:b8:92:
f7:e2:b6:50:a9:70:ba:cc:f8:94:b4:7a:81:3c:5e:fe:b3:e5:
5b:af:1a:00:03:ca:d8:bf:97:23:05:7a:8f:2d:e5:ac:aa:47:
73:bb:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:29 2025 by rpki-client