Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: AxdlkqrElP3NUUOLsZylpvJyi70ufmjCjWVbB4GFoyI=
Subject key identifier: BF:1B:71:FF:98:59:E7:2E:9C:A4:03:51:7A:BD:BF:28:A2:95:CC:03
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 01977CB0748B6D477D1CF0AC45FBB16F29E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 082F
Signing time: Tue 17 Jun 2025 07:00:28 +0000
Manifest this update: Tue 17 Jun 2025 07:00:28 +0000
Manifest next update: Wed 18 Jun 2025 07:00:28 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: h+vVTbfLvuPkE2jr3NJelHCLXHgLb2x/JYfju7n4CP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:74:8b:6d:47:7d:1c:f0:ac:45:fb:b1:6f:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Jun 17 07:00:28 2025 GMT
Not After : Jun 18 07:00:28 2025 GMT
Subject: CN=bf1b71ff9859e72e9ca403517abdbf28a295cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:23:86:4b:49:98:26:3d:a1:bd:de:41:c0:
1d:f6:b0:1f:60:1c:31:f5:72:6e:fd:03:ec:35:de:
ca:df:cf:0b:b1:0f:eb:cc:4b:cc:f2:b4:a4:ff:ca:
35:84:ee:18:6c:e9:6b:4b:2b:be:3f:58:df:aa:7a:
26:09:a2:28:84:83:39:6d:f6:67:8e:fc:d3:19:e8:
80:8a:8e:05:25:94:17:d7:b3:cf:73:79:5d:7a:ac:
9f:79:fa:86:aa:14:11:a2:e3:9e:8b:ce:63:e5:54:
af:52:91:a0:aa:c2:33:e4:21:c0:68:ae:2d:39:49:
92:b1:cc:f0:45:7f:13:ef:7e:fa:a6:15:90:41:70:
3d:46:28:77:86:56:c0:5c:a1:40:21:a3:16:da:a6:
cd:f4:d0:43:f3:8f:65:d1:36:51:8f:bf:ba:16:bb:
a8:d5:7b:3e:fd:83:08:de:34:27:7f:1a:e8:e2:67:
dc:a8:f4:95:33:6a:4f:6e:7d:4c:a6:21:af:34:0e:
56:4a:a4:26:5a:a2:78:f2:67:9e:7b:3e:37:eb:23:
cb:62:42:fd:1f:dc:f6:51:bc:30:01:ab:03:87:d8:
3a:76:48:e7:34:e4:c0:5c:8b:b2:9d:64:b9:de:e8:
1a:21:d7:eb:0f:1f:13:e3:94:dc:5f:20:89:93:1a:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:71:FF:98:59:E7:2E:9C:A4:03:51:7A:BD:BF:28:A2:95:CC:03
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:23:d1:65:49:6c:79:8b:0f:dd:b3:18:8a:b7:20:17:76:
a0:83:fc:3f:bd:7e:5c:2b:fe:65:88:60:f2:0b:65:5e:eb:6c:
40:c2:44:a9:ff:86:69:07:df:18:2d:86:f2:4d:47:43:d3:f3:
a7:8b:0b:31:9f:60:21:57:44:3b:35:19:d4:3b:60:a6:0e:50:
c2:59:3f:52:89:57:90:16:5f:94:23:16:e6:fd:3b:30:04:bc:
27:ec:d5:1b:43:69:e8:e4:e5:a1:49:1d:0b:1d:cb:a0:1f:5e:
75:bc:60:b3:b6:ae:f6:47:bf:18:82:7d:5f:b0:ba:55:87:01:
ba:6a:4e:86:f4:5d:04:b6:53:19:21:4f:b5:eb:8d:55:8f:0b:
fa:f0:90:df:9b:2e:9c:0d:90:be:69:61:fa:71:1c:40:9e:7e:
d4:cd:ae:a0:ce:61:cb:30:e4:0a:62:8a:9e:19:f1:7f:64:b9:
c7:d1:b2:03:6d:64:42:61:7c:6e:fd:12:0e:e2:29:c3:fc:2c:
ba:93:3e:18:60:cb:13:be:11:0c:52:55:e1:c2:34:02:ed:c8:
bf:c0:f7:d9:36:53:34:63:5f:f5:05:4c:27:60:68:43:db:68:
40:00:f9:1f:3d:81:82:c0:f1:9d:5b:8a:f2:80:90:53:28:ad:
18:81:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:26:49 2025 by rpki-client