Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: s4eOABEWlXbfCTrg6HB5DeN8/t43crckofIVyyrGkks=
Subject key identifier: 29:C6:9A:8A:F9:3E:2A:A6:20:CB:E6:C4:1A:56:82:94:69:68:5C:32
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 01976C624D6D9743A444D583BDCEF3A75E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 04D8
Signing time: Sat 14 Jun 2025 03:01:11 +0000
Manifest this update: Sat 14 Jun 2025 03:01:11 +0000
Manifest next update: Sun 15 Jun 2025 03:01:11 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: /6VPEQp7Tm7p2yM8lrZKA1zyW1gVF7QJdesfgT9/iX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4d:6d:97:43:a4:44:d5:83:bd:ce:f3:a7:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Jun 14 03:01:11 2025 GMT
Not After : Jun 15 03:01:11 2025 GMT
Subject: CN=29c69a8af93e2aa620cbe6c41a56829469685c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:fd:f9:19:e3:d9:96:a3:4d:37:47:17:06:
2b:70:ba:96:9e:3b:24:92:68:e4:6e:df:1e:c9:62:
a4:aa:b3:37:39:db:07:15:c9:9c:dc:47:4c:7a:f8:
19:0c:f5:36:3a:27:f7:0c:ff:34:71:63:e8:69:b5:
8e:13:9a:5b:39:29:39:8a:cc:ea:c2:b6:8b:7c:e4:
a1:cc:d4:50:3d:8c:a7:74:67:d1:04:62:af:13:d1:
51:0d:c2:e2:00:01:90:76:dd:a3:47:a3:60:7d:8d:
44:a9:77:73:c4:9c:8e:00:2e:38:86:1e:51:ad:69:
a2:be:0a:b3:ea:90:75:a6:6c:f1:82:be:a9:8e:1d:
16:20:f3:3c:8a:81:11:e3:f1:1a:62:05:b3:64:08:
61:72:3b:c2:19:24:84:ee:6e:c4:71:a1:84:14:49:
bc:98:01:ff:37:c1:41:dc:0f:cb:95:bc:74:9f:25:
43:44:19:a9:5f:97:63:b8:07:1e:fc:d5:c5:d4:9c:
9b:3b:2b:1c:db:d2:20:05:8c:1d:80:b2:ff:93:97:
22:9b:dc:fa:a1:9b:9a:2a:5c:87:83:0e:ec:ff:37:
0e:19:03:32:9a:a7:ba:1a:9d:67:bb:8e:b4:66:e3:
20:b1:13:1b:ba:5b:01:9f:c6:22:d7:6f:0e:e5:8a:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:9A:8A:F9:3E:2A:A6:20:CB:E6:C4:1A:56:82:94:69:68:5C:32
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:0b:a2:a0:38:ab:38:6f:51:5f:73:f6:56:73:c0:f5:04:
5c:c4:f7:c2:4e:36:33:2a:2d:5e:b8:e0:7c:a1:b2:3f:46:cf:
9a:07:4b:81:e0:3a:c2:dc:73:90:68:43:ea:82:40:5b:dd:70:
38:86:a4:f8:e8:1a:96:cf:f0:35:1e:7b:54:e2:50:19:3a:fe:
e5:4b:fc:af:26:32:dc:66:4b:4e:da:9b:2a:9c:ad:e4:67:d1:
8b:bf:e3:5d:04:96:6f:c3:a7:6c:f4:5e:8b:ab:1c:80:82:66:
8e:10:c7:1c:af:b1:d6:b2:c6:8b:ae:0a:0a:81:3d:57:47:e7:
9f:46:79:ef:7c:a2:73:71:83:b1:41:5a:a0:b8:74:75:04:3e:
f3:51:56:fd:ba:8e:65:2b:1b:a8:b5:66:bd:f9:49:9f:6b:b1:
96:30:bb:31:e3:a7:43:2e:6a:c3:cf:c1:9f:dd:5e:1c:0f:f2:
d6:34:0c:43:54:91:56:a6:2b:d8:cb:89:7f:0f:4d:33:06:9c:
02:84:5f:64:8f:76:17:e9:be:9b:ef:55:05:9d:9d:25:3e:eb:
ad:7b:24:64:c9:e2:e9:56:30:ab:65:98:b3:d3:58:f2:5e:59:
df:45:0d:72:12:90:f3:7a:84:fe:29:3c:eb:b9:ec:82:cb:00:
72:7f:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:36 2025 by rpki-client