Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: XDRTMhE1tghvPaXtfqr38kC1JrO4rq3jUYGKrl1FDSg=
Subject key identifier: EE:BD:83:5F:84:27:85:FB:A3:07:C6:48:D8:9F:3B:B3:3A:1D:0C:A5
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 0197703E9125D36F13C9DA947A8B4473C0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 0572
Signing time: Sat 14 Jun 2025 21:00:37 +0000
Manifest this update: Sat 14 Jun 2025 21:00:37 +0000
Manifest next update: Sun 15 Jun 2025 21:00:37 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 2EPxMc3vI700s3ae/KzRWZvIogtg9v2U+8UWg/bm9MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:91:25:d3:6f:13:c9:da:94:7a:8b:44:73:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Jun 14 21:00:37 2025 GMT
Not After : Jun 15 21:00:37 2025 GMT
Subject: CN=eebd835f842785fba307c648d89f3bb33a1d0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:a7:b6:56:ed:dc:c8:a0:dd:61:87:18:9f:
32:47:95:95:93:21:80:ec:5e:c7:e5:f3:7c:6a:0d:
61:fd:ea:be:b5:cb:b5:63:ff:67:e3:ab:3d:73:92:
0f:03:18:31:15:70:0d:7e:56:a6:8a:ef:95:97:ff:
80:e9:85:fa:d6:17:1a:3f:83:55:ae:15:66:eb:8a:
d9:86:39:b1:bf:89:2d:07:ae:47:e1:60:c1:f4:81:
f7:4b:6d:3d:78:e7:68:50:ac:f4:10:ad:5e:d9:c9:
b4:81:f5:ba:3c:83:66:6e:63:61:9b:a4:d3:9a:c2:
b1:6e:fb:f9:6b:90:bc:21:05:2c:84:51:ee:a7:a6:
d2:27:31:16:9e:3b:89:53:4a:b0:0e:5f:bd:c8:6c:
f3:66:9f:94:7d:10:35:b3:cb:e8:12:14:09:39:8d:
e2:31:cf:d8:1f:1d:da:9f:b7:46:ef:2c:0c:76:d8:
d6:ff:4e:52:c1:40:17:c0:fa:69:cf:7e:4a:df:2b:
ea:07:50:69:3f:e9:04:34:95:7a:7d:c2:22:9e:5b:
7b:97:2e:29:f5:65:09:7d:96:ff:c0:42:64:e9:4d:
d7:a3:38:f8:5d:aa:d7:fd:f0:f8:f5:53:28:d3:20:
9d:cc:3a:76:80:ac:4e:c8:3a:3b:52:c7:18:d9:e9:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:83:5F:84:27:85:FB:A3:07:C6:48:D8:9F:3B:B3:3A:1D:0C:A5
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:05:14:f4:f7:9c:a0:80:fc:4a:3b:de:90:12:b5:89:92:a2:
fe:00:7b:45:02:a3:ec:ba:38:d7:29:14:da:1d:1b:c1:79:d7:
8c:2c:06:f0:5d:18:6b:71:8c:24:70:6a:d2:54:4d:51:2d:af:
fb:69:49:10:0a:71:56:56:dc:86:e4:0f:8e:cf:1d:c0:95:0e:
78:bc:17:6c:59:84:33:8b:89:23:12:94:a8:60:73:d1:24:b6:
89:2b:6f:dd:b5:64:67:eb:70:bd:b7:8e:96:74:b6:f2:9e:a5:
23:11:0a:ca:96:91:9d:31:59:39:b9:65:28:46:84:38:15:85:
fb:80:dd:35:a2:3c:ce:c5:9b:b0:38:12:2a:b7:7c:ab:70:d9:
34:8d:c6:4a:eb:8f:16:08:bd:27:e5:ec:16:b6:75:f6:d3:26:
44:d0:08:7f:60:5e:31:c3:54:fc:ff:14:2d:fa:28:c6:54:53:
2e:2b:bc:f6:7a:51:3c:30:99:4d:ca:4b:19:81:32:ca:83:76:
4f:d3:48:d9:a0:a8:be:97:9f:df:71:70:86:11:47:91:7f:76:
b5:9e:9d:a5:e6:b2:a4:1c:07:ba:8c:f9:7b:33:73:72:4f:6c:
35:95:9f:6d:6d:d4:3b:21:5a:23:50:0d:14:79:5d:d7:b1:d4:
02:fd:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:20 2025 by rpki-client