Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
File: LsJnz2xrO4jpahG_KemnOlWMXkA.mft (raw, json)
Hash identifier: 6hXMGVJ2JKLipncZ41LOtRR/8dm79I5/KAilRXxOWEI=
Subject key identifier: FB:F5:1B:8D:10:CC:FB:2A:F1:D9:48:11:1E:21:EE:73:DE:1F:0E:A8
Authority key identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
Certificate issuer: /CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Certificate serial: 01989E9563F698430D56FE09E2C52DB4FC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
Manifest number: 15BC
Signing time: Tue 12 Aug 2025 14:00:47 +0000
Manifest this update: Tue 12 Aug 2025 14:00:47 +0000
Manifest next update: Wed 13 Aug 2025 14:00:47 +0000
Files and hashes: 1: LsJnz2xrO4jpahG_KemnOlWMXkA.crl (hash: H+sggA6Iyf5Arp4DNH83rCs4BYD5ow5/5rDg+w42+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:63:f6:98:43:0d:56:fe:09:e2:c5:2d:b4:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Validity
Not Before: Aug 12 14:00:47 2025 GMT
Not After : Aug 13 14:00:47 2025 GMT
Subject: CN=fbf51b8d10ccfb2af1d948111e21ee73de1f0ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:2b:94:aa:a2:fb:92:ef:ea:2e:72:5a:eb:
9f:90:53:8b:72:69:0c:d3:23:b2:95:76:a8:2f:58:
52:11:9f:8f:e6:07:9e:c0:34:e0:51:15:e0:82:d1:
34:02:a9:37:2d:ea:66:3a:04:18:c6:50:b5:4a:a0:
bc:f2:60:39:81:a3:4a:12:00:fa:1b:83:32:07:8e:
02:47:b5:16:f5:ac:d1:33:b3:8f:28:fd:74:df:58:
f5:41:89:ad:a4:6a:69:b1:40:06:dc:41:6e:03:13:
9d:31:51:d7:dc:a4:a3:a3:42:93:ab:b0:ae:e6:04:
ae:7c:a1:64:75:69:b3:84:59:2c:9a:95:d0:a3:32:
d1:2a:11:27:e6:88:77:2f:01:6e:0f:99:3a:8e:7a:
fb:8b:25:2f:b9:8c:4e:e9:e7:7d:c9:c4:7e:df:53:
24:49:a4:be:ed:19:c3:8a:f3:5e:97:cd:2a:f7:c3:
60:e3:ac:1e:26:5c:cf:61:47:e0:15:ac:01:fe:93:
7a:da:1b:02:c7:4b:3f:54:87:f6:79:d5:43:ff:02:
00:d4:7f:44:ba:f8:13:c2:32:bb:74:42:e7:c6:b5:
de:58:d6:9a:4f:f1:df:99:80:43:64:0f:29:2a:19:
56:9e:8e:21:63:f3:d6:66:40:0c:41:5d:c7:04:74:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:1B:8D:10:CC:FB:2A:F1:D9:48:11:1E:21:EE:73:DE:1F:0E:A8
X509v3 Authority Key Identifier:
keyid:2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:41:87:b3:29:ee:5c:72:73:b6:ce:d7:e0:96:26:ef:43:
a3:a4:98:f3:30:ac:6a:4f:43:a2:c4:0c:82:7f:c5:71:b9:b6:
a8:c9:a0:a5:89:a2:7f:04:5c:6b:11:f9:31:4e:de:30:2d:66:
67:8d:a7:cf:ed:e3:9d:52:e9:3f:83:5d:9a:92:02:92:c5:cc:
0c:17:8b:9a:c5:a8:ad:d6:35:23:36:f0:f9:22:39:45:84:15:
c5:f8:4b:72:72:6c:df:6f:49:51:11:12:ab:9d:ab:9a:2b:8a:
cf:ec:2c:db:89:e4:6a:a7:a1:6f:1d:e0:f2:d2:55:27:0c:17:
d2:11:bd:e6:ad:57:f3:bc:f9:ef:38:7b:70:6f:a2:1b:07:72:
18:8f:e3:86:37:6b:16:0f:ac:fe:7c:d1:1e:3f:f6:67:4f:47:
4c:19:36:51:81:1e:c0:b5:50:dc:88:6a:c2:da:5a:bc:9f:18:
8f:3c:6c:22:4f:71:21:39:cf:99:44:9c:77:7f:40:e7:d3:f3:
53:09:99:26:3d:e1:32:ed:d9:ce:e7:19:ca:6f:d6:a1:84:10:
62:b5:08:c5:1c:dc:14:6f:00:7c:e1:25:42:58:c4:a1:59:14:
13:f4:8c:dd:e9:1f:fb:12:32:54:3e:c0:45:13:db:bd:42:f6:
34:07:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:37 2025 by rpki-client