Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: d8vA7TevBku8iqwMV5hGHgFwVyj+1Vo7pvdq3wc40ME=
Subject key identifier: 40:5C:62:87:01:39:DF:E9:DE:0B:7B:B1:56:FA:CA:E1:4F:73:E0:44
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 0197B6A17710A0684D83497C146C3B9C3901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 06AE
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: irzGfW00oxsmNe/TaMzSoeGe1b54QxdQ+ukGTp1woak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:77:10:a0:68:4d:83:49:7c:14:6c:3b:9c:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=405c62870139dfe9de0b7bb156facae14f73e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:24:8c:80:7e:32:a8:9a:87:72:cf:3b:f0:
c9:7c:50:ef:d0:20:70:ef:27:c5:3a:b2:ac:81:9f:
12:e4:0f:49:aa:39:b4:81:f8:84:36:ff:3b:28:88:
5f:87:bd:6e:b5:25:af:c5:7b:31:be:ae:1f:1b:f7:
67:8c:ea:6b:eb:57:8e:88:cc:b9:54:dd:b9:7b:99:
d5:fd:60:91:62:ab:fa:07:52:fb:74:a2:21:d5:52:
55:78:1f:4e:73:5c:77:c2:93:21:64:d3:9e:a5:29:
72:38:a0:77:cc:9f:47:79:2d:2c:bc:f9:5f:c7:f7:
b8:02:29:e7:54:5e:08:65:be:72:4a:0f:fe:26:69:
67:b5:81:eb:79:79:4a:21:d6:c5:83:05:fa:77:f6:
06:6e:70:53:23:9e:44:32:7c:63:4b:21:7b:e4:5e:
3f:34:d8:13:0d:16:fc:fe:d2:0a:c6:a8:96:f3:d9:
13:ff:22:da:61:4d:f7:d9:1a:6b:97:4f:b2:35:11:
bd:dd:d9:bb:d8:25:48:55:7b:b5:24:05:8f:71:da:
02:6b:cf:67:6e:fd:b0:9b:ca:7e:4d:65:fb:fd:d5:
1c:eb:ba:6d:c8:52:c5:64:72:f4:b5:4f:b8:c8:ba:
a1:a7:8a:8e:63:2d:1a:d3:cd:5a:ce:81:db:89:5e:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:62:87:01:39:DF:E9:DE:0B:7B:B1:56:FA:CA:E1:4F:73:E0:44
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:14:58:fe:ab:d1:bc:6e:1f:ef:bc:62:6d:96:5f:d1:36:0d:
0e:03:0d:b8:ed:6d:ea:45:d0:ff:2c:c7:48:db:65:a2:b8:09:
b7:b8:a0:06:21:69:8b:70:a7:1a:51:4e:f3:55:66:6d:70:c6:
74:29:5c:c9:ca:9e:73:ce:57:04:97:ed:9f:13:4d:f3:0d:5f:
a7:93:68:5d:e0:16:6c:d8:be:2d:d7:6a:63:4d:c1:18:93:53:
99:ee:92:f6:a1:3b:bb:62:46:fa:96:2c:fc:02:dd:85:27:bc:
03:be:6b:dd:51:0f:ae:b0:d3:63:97:6b:50:b1:2e:cf:73:8e:
e7:bb:cb:cb:3d:3d:2b:53:f4:be:8e:e7:6e:50:e5:7d:f6:77:
aa:76:cf:04:29:d1:ba:de:47:28:be:5a:c0:25:25:27:9f:1d:
92:c7:08:ea:d1:c0:a5:6f:65:2b:9c:2b:cd:a0:48:ae:dd:86:
9e:e8:b1:a7:f6:4f:6c:1f:56:b5:87:79:4c:93:61:21:e4:45:
97:83:26:b9:2d:49:58:ba:da:6a:35:20:8c:d8:f8:44:19:3f:
0c:08:08:51:2b:e5:51:4f:53:b8:81:7a:7d:40:34:16:34:64:
6a:37:90:da:16:38:1d:a1:e5:9c:c0:6f:c2:3a:29:ff:75:18:
6f:26:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:44 2025 by rpki-client