Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: FZkaq5C+FM5mmkrzLqmPx0Zwq0X8o3wbJmvM/SLCJPA=
Subject key identifier: C7:99:F1:98:DD:A7:18:46:27:D2:01:5B:4E:1F:C3:83:4D:8F:FE:7A
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 0198D84F137668E673889061D4E7EE1A5717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0D62
Signing time: Sat 23 Aug 2025 19:01:57 +0000
Manifest this update: Sat 23 Aug 2025 19:01:57 +0000
Manifest next update: Sun 24 Aug 2025 19:01:57 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: z3O2jAZZSVT27H8bxwNbPKoKhRUHYp4Cz+wtjIQYtUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:13:76:68:e6:73:88:90:61:d4:e7:ee:1a:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Aug 23 19:01:57 2025 GMT
Not After : Aug 24 19:01:57 2025 GMT
Subject: CN=c799f198dda7184627d2015b4e1fc3834d8ffe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:ae:0a:93:af:a7:14:34:c9:ca:26:bf:e1:
ba:ea:d9:92:ed:13:55:0d:9d:f7:eb:2b:ab:73:2a:
15:73:76:a8:e1:22:ae:81:8b:bc:23:1e:73:f3:08:
f9:d0:97:d1:5e:52:46:99:f8:bd:bc:97:88:ae:b3:
75:95:ea:96:22:b3:81:73:65:9b:5e:2c:fe:ee:9a:
44:7b:08:79:83:56:9b:d8:b5:15:67:4f:14:f1:9f:
66:09:72:b5:25:5a:8f:39:df:51:4f:26:88:11:ae:
3e:30:5d:43:69:40:a4:46:ed:f0:30:75:22:65:a3:
28:87:3e:50:e6:64:22:c4:18:55:15:74:14:a5:fd:
03:ec:03:ea:9b:d8:84:33:2f:99:e2:f4:2a:58:fd:
60:fb:f5:06:a9:81:66:f0:b7:d0:d1:b5:36:1c:df:
24:dd:d9:13:d8:55:a8:bb:0f:e6:4b:38:01:fc:21:
e9:69:06:b2:74:b6:63:41:f6:2a:68:e2:4d:82:2a:
c9:d2:e7:56:27:7c:dd:44:17:33:8f:f3:44:da:73:
7b:c0:f6:08:e0:28:de:a1:61:a9:1a:7b:0a:1b:bc:
0e:1c:08:27:a4:ee:de:2a:7e:e7:1e:47:a8:39:fe:
91:09:b3:30:a8:73:99:b8:40:a3:57:17:41:99:e4:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:F1:98:DD:A7:18:46:27:D2:01:5B:4E:1F:C3:83:4D:8F:FE:7A
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:37:da:fc:52:7c:ac:d4:be:a1:f5:52:b6:6c:e6:09:cc:90:
41:be:59:ab:e1:98:f9:d2:cc:3d:37:ec:9e:ea:4e:73:b6:c0:
69:ba:f1:03:a1:14:f9:ac:29:f1:60:78:73:21:5a:16:6e:00:
9f:9e:66:95:20:e6:2e:4b:9b:9b:de:49:52:e5:09:9c:c9:cb:
f9:15:0f:18:d6:14:73:ce:cf:10:cf:61:df:16:15:73:4a:8f:
a4:4f:91:c5:3f:db:95:73:53:e5:13:f5:93:e9:76:d1:2c:f2:
f8:16:c7:cb:3c:58:20:21:9d:f0:ea:8d:a8:20:9f:9d:cb:19:
55:17:82:d3:a8:d4:f7:5e:af:9c:d7:7c:5e:01:59:5d:1b:c4:
2b:d7:2d:a9:28:ed:d4:a0:5e:cb:10:0f:58:38:83:f7:99:91:
98:15:e4:fa:72:93:d7:d2:7c:39:85:be:96:8b:6c:5f:4b:b8:
98:5c:36:0d:40:0e:4e:a5:27:f3:ed:3b:3a:b0:2b:b6:10:4e:
1f:6e:dc:d4:4d:5f:ad:35:0a:b8:1f:85:bc:2a:7f:ee:3e:9b:
ba:dc:9d:54:f6:57:0d:5b:9c:c2:7f:dd:88:58:40:c0:3f:be:
a8:00:65:fa:ec:55:cc:ad:82:e5:ca:87:a4:b1:8e:f5:ee:55:
f5:60:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:49 2025 by rpki-client