Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: 3pE7Ux/rhstRDKTIapJPqljjc5DX0VXO7wkXyoyUyyM=
Subject key identifier: 1E:1C:83:7C:48:FF:6B:42:0D:2C:9B:3B:08:F7:DB:BA:0B:2D:15:E3
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 01989D82BAD0CB78E4F24207136DCEBB1401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0576
Signing time: Tue 12 Aug 2025 09:00:46 +0000
Manifest this update: Tue 12 Aug 2025 09:00:46 +0000
Manifest next update: Wed 13 Aug 2025 09:00:46 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: /5ThQbCbbtm+aGJo1sJAJLpFjvfP2yYpDsYXvkN+scE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:ba:d0:cb:78:e4:f2:42:07:13:6d:ce:bb:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Aug 12 09:00:46 2025 GMT
Not After : Aug 13 09:00:46 2025 GMT
Subject: CN=1e1c837c48ff6b420d2c9b3b08f7dbba0b2d15e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:90:db:83:94:5a:13:a3:33:61:d2:43:6c:
42:4b:1e:9d:c0:87:5a:ab:88:da:57:f0:71:23:c3:
23:8d:e9:d0:95:37:dd:c2:73:d3:ba:b3:1c:b1:09:
67:6b:38:dc:28:6b:98:07:ad:4e:ed:3d:20:83:49:
0f:18:0b:54:58:15:8c:2f:55:e3:39:de:a2:c7:5f:
31:2d:eb:4a:59:0d:ad:9c:92:66:69:1d:84:c5:03:
a6:30:bd:a5:83:29:73:9a:34:a0:d2:ff:74:c4:51:
b4:b1:43:d4:e6:ea:0d:3c:35:24:49:06:ca:51:8d:
27:f8:88:b7:b8:3d:14:8d:4e:bd:5e:78:15:2e:71:
4d:d5:d5:ec:8d:84:b3:84:33:81:00:1b:79:94:10:
6d:cb:25:88:be:d5:89:2c:21:37:95:8c:d1:30:39:
74:1c:50:84:31:dc:f1:24:b6:6a:5d:68:d9:eb:ad:
9d:05:79:3d:1d:e2:bc:cb:83:4b:da:0f:d1:44:95:
11:92:40:0d:d1:b9:3e:18:61:bb:79:3d:41:28:50:
a3:9a:49:ca:b7:a5:80:92:45:05:b3:e6:86:53:27:
9a:92:d0:c2:20:97:93:13:5f:3e:94:bd:4b:c6:9e:
7e:f4:13:52:54:dc:6a:e4:75:b6:82:62:03:be:30:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:83:7C:48:FF:6B:42:0D:2C:9B:3B:08:F7:DB:BA:0B:2D:15:E3
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:37:c6:bf:f3:d5:91:d3:fa:05:d4:c3:4f:93:97:9f:c7:
d8:ad:b9:07:f1:21:07:15:92:2e:a2:9c:88:a5:53:3b:a4:fd:
d7:f1:31:3d:e6:fa:16:30:6d:6b:6a:27:e5:ef:41:8b:3f:75:
19:ac:a8:c7:f6:6e:82:2d:93:69:be:6e:b0:e3:0e:2f:fb:70:
e7:85:3a:65:d5:fd:49:46:ac:1f:b2:78:71:75:83:32:13:69:
34:4c:5b:ae:b7:d7:8d:c9:0c:0a:41:dd:2c:ca:47:ff:d3:34:
8f:ac:3b:bf:64:cf:53:31:57:1b:ff:12:42:d9:3e:05:28:83:
16:87:df:4d:f2:76:03:d4:6f:08:f5:85:9c:5c:e0:32:3b:7d:
41:1c:a8:95:e6:f7:af:43:17:f3:9c:7f:64:c7:23:6f:9b:6f:
5c:a2:21:3f:bc:10:ff:01:11:ea:80:42:e1:8c:0a:d5:7a:9f:
4d:f8:c7:17:b3:10:81:13:af:98:7e:96:57:bb:ca:da:78:64:
ef:c7:aa:0b:58:88:4b:35:5f:35:31:f6:98:fa:a0:95:24:8f:
37:18:23:63:38:79:e3:a0:be:d6:d2:d2:53:67:24:f7:20:cd:
5a:9a:62:03:68:23:93:f9:09:fa:9f:40:0f:98:81:d9:9e:7a:
57:0d:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:43:46 2025 by rpki-client