Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: iMqQu+dyR+UYVkuK2sdzq0aKSH0AY8QVrDWp/kNSRkQ=
Subject key identifier: 1A:4D:85:5A:DD:7F:1A:37:40:9B:10:84:5C:70:62:35:4F:B2:1E:F0
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 0197B6A0A29CBDE9A6784438FB5F779F5206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0CCC
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: GIXvRuqhb+UMBHsxm29mxkjeyYBFk2siyCifE9pIjMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a2:9c:bd:e9:a6:78:44:38:fb:5f:77:9f:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=1a4d855add7f1a37409b10845c7062354fb21ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:81:fe:c3:4e:9e:74:69:3f:35:de:50:f3:
f5:92:18:88:36:2b:fa:a7:88:0b:23:cf:61:4c:7b:
11:9d:11:b7:2e:7d:b3:ad:ff:d1:ef:d9:80:71:80:
b3:e6:69:59:a2:ae:8a:d2:4e:a6:f2:6a:12:a0:68:
58:ea:87:71:44:4d:5f:03:dd:cf:e8:38:a6:d0:92:
c2:eb:4a:f8:f3:28:ad:28:4c:95:71:91:85:c2:e7:
2b:c1:db:b1:6b:2a:81:0f:77:ed:35:66:e0:68:c2:
fc:0e:16:3f:19:96:18:9b:45:a6:78:18:fb:29:70:
a9:6f:1f:15:97:33:63:e5:11:08:a8:e7:4d:39:73:
16:d7:a6:5b:e9:3a:6b:7e:b9:d8:33:f9:f6:9f:9c:
36:03:df:d8:4d:5e:c2:60:08:09:3f:60:00:5d:f0:
21:90:bf:33:c8:58:1c:91:88:e1:b2:df:dc:a8:ce:
b6:3e:db:22:25:5a:cb:d6:24:c0:e1:68:a7:f3:95:
7b:89:1a:36:c6:a9:1f:cf:38:5d:29:73:5a:16:a9:
0c:b1:d5:8f:51:b6:53:05:c2:df:09:78:69:59:36:
22:e3:b5:74:c5:c0:c4:bf:e4:0f:fe:90:1b:ce:05:
f2:dd:7d:3c:6c:4b:5a:90:ab:36:38:d9:e5:4c:8e:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:85:5A:DD:7F:1A:37:40:9B:10:84:5C:70:62:35:4F:B2:1E:F0
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:03:2e:87:9e:21:e5:7a:ef:c2:08:41:04:35:a4:a8:ee:
3a:34:4c:38:24:8d:72:53:23:95:66:03:44:fa:39:10:c1:0d:
84:fa:f1:19:1f:36:7a:7b:8e:56:e0:8e:cf:de:f2:39:4f:94:
ca:a8:cc:4f:9f:0e:21:5c:ce:37:d5:e3:19:04:48:73:e3:07:
9a:0e:f0:a2:e8:c3:d0:f5:67:32:60:a5:e6:1a:ba:6b:8f:88:
38:0a:39:e5:0a:79:b4:a6:78:d9:60:3e:b7:dd:aa:f5:9c:b4:
f4:ec:e8:47:4a:a1:43:40:07:02:3f:d1:52:8a:a4:07:cb:ef:
6a:88:7d:fa:4a:58:84:4d:d7:a3:9b:d1:e5:fa:de:48:ac:70:
46:e9:e5:e2:c5:f9:12:2f:43:34:63:1a:92:1f:4a:bd:f2:b0:
a8:d7:ac:77:4e:f4:9a:58:4f:56:89:78:59:d3:c0:aa:37:31:
56:02:4a:ff:13:e3:d7:36:a8:c1:04:6c:b7:f9:bd:83:14:93:
05:77:ea:11:f6:dd:92:9c:b4:3b:c1:bb:9b:3f:95:2c:4c:2a:
a7:ef:84:64:6a:6b:d6:f1:12:1d:ec:d6:0e:ba:dd:a9:82:00:
58:b2:6e:bd:fe:60:39:bd:6d:69:cd:7f:de:a7:33:3e:46:49:
24:2e:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:01 2025 by rpki-client