Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: bs8zuO4mK+hSaYJ3rS4GfyZc/eMkvfCkUrYK9JlMrck=
Subject key identifier: 67:FB:A1:B6:C6:6C:4B:5C:4B:A6:A5:F1:E4:D1:46:2C:FE:0B:95:39
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 019768F2A2700EF15A4A9E85F6CADBE10D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 11:00:21 +0000
Manifest this update: Fri 13 Jun 2025 11:00:21 +0000
Manifest next update: Sat 14 Jun 2025 11:00:21 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: Ax1IN5XNgPrxN+L9Rn8RHNj0YWlZEKO3MnyXuB2mpGM=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a2:70:0e:f1:5a:4a:9e:85:f6:ca:db:e1:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Jun 13 11:00:21 2025 GMT
Not After : Jun 14 11:00:21 2025 GMT
Subject: CN=67fba1b6c66c4b5c4ba6a5f1e4d1462cfe0b9539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:f6:ff:d1:7f:5f:39:b7:24:75:86:65:ce:
42:b2:f2:70:ae:54:25:c7:36:8e:85:b2:0b:d6:29:
73:2e:67:db:97:5e:8e:00:cb:72:9e:2c:01:8c:56:
2a:ff:cd:e6:fb:7c:51:6b:33:f8:1e:c7:a0:7d:e1:
34:22:28:b1:68:8a:67:18:90:20:9e:31:f6:95:48:
2e:c1:f3:09:53:14:b9:f9:82:74:2d:46:56:c7:7b:
2f:06:c9:6a:67:9c:53:31:fd:c7:0e:01:0c:5c:01:
48:88:fc:fa:a6:cc:e2:85:22:34:0e:1c:3c:6a:75:
07:54:fd:ef:18:99:5f:7e:85:74:43:2d:7e:5e:e6:
65:b5:45:51:4f:fa:04:99:df:4f:18:48:5c:ee:f6:
5d:e1:ae:90:b6:16:21:1f:31:94:aa:1a:a0:e8:71:
15:f2:a3:29:09:ba:c3:08:13:5a:93:cd:c1:bf:6e:
0e:8c:6d:20:cf:a9:ed:b0:3d:b4:4d:44:d2:20:95:
22:26:e9:13:53:4e:af:2d:49:3b:cc:20:28:fb:74:
0f:31:92:6e:46:3d:7b:ef:bc:68:8b:5d:fc:df:f7:
36:77:3d:24:bb:f5:d1:b9:ee:f4:6c:d3:7a:20:e1:
c3:cf:a1:48:b5:bb:e3:d1:8c:56:e0:60:85:3c:fc:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:A1:B6:C6:6C:4B:5C:4B:A6:A5:F1:E4:D1:46:2C:FE:0B:95:39
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:c1:39:85:31:ce:bd:6d:1e:a6:1e:6b:24:f5:3b:62:56:
2b:96:98:0a:b9:0b:3d:68:ff:16:8e:ac:bb:0f:45:dd:63:e2:
82:cc:d5:3f:e6:0e:aa:f9:26:e6:b7:38:3e:79:91:8b:58:b7:
84:63:cb:6b:30:70:f3:67:ed:35:80:fa:cf:bf:ec:30:62:96:
42:f9:de:85:44:0c:28:29:b6:c0:d7:8a:9c:4b:1b:45:8a:5d:
25:db:98:d3:1f:f9:e5:aa:c4:b6:e6:78:ec:28:f1:48:03:7b:
48:a5:89:bf:1f:7f:72:07:2d:c3:ac:ce:7e:94:4a:91:ff:5f:
9c:b8:89:6e:f4:6e:df:50:b5:c0:de:20:f2:97:4e:c2:6a:3e:
50:61:3e:13:bb:fd:b4:97:ff:b6:91:4c:9d:e4:0f:2f:9e:b4:
85:c5:2e:03:67:ac:32:9b:11:99:e3:d1:cd:65:b0:69:ea:6f:
a1:80:8f:a5:c7:e4:c0:80:60:fb:ef:b8:7c:66:23:0d:1d:07:
d4:cb:fd:63:3e:3f:bd:40:3b:1b:2d:a2:10:ca:29:61:ce:be:
68:27:14:0f:ac:f3:64:0f:d1:25:16:79:5b:ec:55:4f:60:e1:
f1:f5:17:1d:3e:bb:10:b2:43:c1:11:3c:bb:86:d7:4d:c7:2f:
98:c0:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:56 2025 by rpki-client