Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: ADVi7B3qzTsXbV7govp+/DXbMOLPSkPe2/3fn/nL2Q4=
Subject key identifier: A2:9B:8A:81:A6:77:6B:37:E0:42:5B:9B:2E:F4:FB:37:88:B7:26:7A
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 0198A04E88F6C46D698BA5A2B8B9A4957FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 06AD
Signing time: Tue 12 Aug 2025 22:02:38 +0000
Manifest this update: Tue 12 Aug 2025 22:02:38 +0000
Manifest next update: Wed 13 Aug 2025 22:02:38 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: 889wDszJ3IfX/oqEgRbahu2bdpzewJnb82gq3MX5TDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:88:f6:c4:6d:69:8b:a5:a2:b8:b9:a4:95:7f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Aug 12 22:02:38 2025 GMT
Not After : Aug 13 22:02:38 2025 GMT
Subject: CN=a29b8a81a6776b37e0425b9b2ef4fb3788b7267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:f1:cf:27:d9:a5:0c:f6:07:5a:a6:df:2d:
55:a1:55:0e:ac:0a:a6:5d:57:6a:ed:83:aa:ee:05:
d0:9f:67:7b:96:92:43:ad:b8:40:e2:d5:3d:37:ac:
bd:16:af:58:15:6c:d5:59:58:68:78:ab:25:47:7b:
22:93:7c:2f:a2:01:4a:fd:75:21:c1:f4:26:6c:40:
6f:95:8c:fc:71:bc:44:04:93:cf:bb:07:83:3b:c6:
33:88:2e:eb:dc:5c:a6:8b:a4:10:12:34:d1:7e:8f:
db:64:a4:c2:02:d8:08:6c:da:a3:3f:a2:50:d3:b9:
8b:98:58:a7:23:76:e7:49:9b:53:11:1d:18:00:c6:
44:6c:4c:c8:dd:99:60:e5:24:07:cb:d1:52:4d:91:
e1:5f:ce:71:56:3f:e4:34:e3:a2:7b:7e:e4:36:51:
e1:ad:e3:06:72:8b:c2:4b:1f:1f:91:6c:44:ce:b9:
29:d6:ff:4c:0c:d3:00:d8:81:eb:ac:70:5a:2e:9c:
98:69:55:0f:f0:ef:89:e0:be:ed:48:c7:94:34:8d:
35:84:00:58:e2:e6:11:8d:77:d5:1d:29:36:06:91:
ac:30:2b:f1:b9:9c:8c:4a:96:b0:56:2f:81:08:65:
46:1d:51:ba:70:73:8f:3b:02:64:48:8f:a7:20:a4:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:8A:81:A6:77:6B:37:E0:42:5B:9B:2E:F4:FB:37:88:B7:26:7A
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:46:a3:2a:a2:10:b9:f5:64:61:29:fd:e5:5b:14:4e:8e:
9f:64:dd:89:2f:6d:01:69:7c:78:24:04:c6:06:9f:fe:23:5a:
db:4e:56:41:ad:59:08:8d:c1:c6:37:46:44:c7:42:65:14:a7:
bb:e6:0a:01:08:18:53:82:3c:6f:4d:f3:fa:8f:80:b3:2d:ce:
cd:8e:24:35:67:3c:d1:ff:1e:34:c9:8b:a5:9b:4e:ef:b3:f0:
97:e1:de:fe:fc:ef:36:57:3c:c4:09:bf:8b:b8:d7:bf:43:7b:
5e:28:0a:ad:a9:7f:3d:ae:e2:3e:d4:0b:e4:9f:76:55:02:3b:
3c:33:77:14:2e:09:cd:17:96:5c:1d:04:c8:79:4b:05:91:57:
2e:38:b6:f6:a7:9f:b2:e8:28:a3:47:98:ae:cc:d3:46:2a:45:
e9:2f:6e:6e:05:88:ef:cf:a2:fd:36:bd:25:47:67:48:17:71:
df:bf:d1:89:12:64:94:0b:9c:b2:d3:9a:f8:3e:56:14:18:40:
21:49:2b:0e:52:83:e2:18:f2:74:71:b6:34:ec:91:77:c2:7b:
ca:ec:01:22:6d:8f:ec:d6:1d:e3:8d:9c:ad:81:49:44:a7:42:
5f:4e:f8:fa:11:da:38:f2:d1:98:db:cb:0f:0b:fd:9f:9a:6e:
57:e0:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:18 2025 by rpki-client