Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: XLJh0fdys+4AsyvLsiDg0vwRmoWv8jNkHIz5hhvqeZ4=
Subject key identifier: E8:2B:87:78:E6:F6:8E:4B:EA:0C:68:89:03:02:06:EA:52:2D:9C:26
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 01967AFBC7FFBB25BFF8890D2637175D79D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 04F3
Signing time: Mon 28 Apr 2025 06:00:43 +0000
Manifest this update: Mon 28 Apr 2025 06:00:43 +0000
Manifest next update: Tue 29 Apr 2025 06:00:43 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 6kaNHIcX6/JfQADYNLJG1cv8vB4Xnf5So5INBAOFb3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:c7:ff:bb:25:bf:f8:89:0d:26:37:17:5d:79:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Apr 28 06:00:43 2025 GMT
Not After : Apr 29 06:00:43 2025 GMT
Subject: CN=e82b8778e6f68e4bea0c6889030206ea522d9c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:37:a5:95:d9:1e:92:92:ba:bc:1e:04:c5:
14:f3:e2:99:d8:83:71:2e:8d:20:5a:d5:43:ef:d5:
b4:fb:f6:a9:ff:ac:86:72:7c:c0:70:9c:03:df:5f:
d2:be:00:4b:62:88:06:7c:09:54:b3:1c:c9:4c:be:
ce:67:5f:86:df:03:66:10:83:04:07:12:ee:43:9b:
3a:24:5f:7f:99:a6:aa:f9:5b:a2:51:4e:d5:26:dd:
c3:f9:61:69:45:f7:9f:fa:33:dd:3d:56:d6:06:e4:
a2:da:3c:0f:69:9a:88:8b:9c:b1:29:9e:9d:77:97:
8a:36:af:a2:a6:d5:52:ba:5a:3b:4b:b6:fd:e1:d8:
87:46:ec:1f:89:f9:f5:52:3b:7f:6b:f2:0b:bd:5d:
94:d4:dc:4b:a7:f8:1c:05:aa:25:5e:bb:52:4e:d7:
0b:02:49:c9:88:49:36:7e:54:54:30:98:41:bc:9e:
e2:10:0f:fc:59:48:8e:1b:3b:cc:5b:ea:8d:a5:2e:
dd:04:3c:80:ea:71:fb:04:4c:c6:23:05:4c:18:d4:
aa:27:ef:81:39:29:9a:27:c5:0b:30:a2:45:86:ec:
15:47:3c:c0:0a:f3:d1:35:be:44:81:ac:e6:f6:32:
42:ea:56:4b:ed:59:67:9b:50:91:d2:da:07:98:69:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:87:78:E6:F6:8E:4B:EA:0C:68:89:03:02:06:EA:52:2D:9C:26
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:88:e4:75:3e:a7:3d:0f:b8:b5:f9:7a:ec:bf:e9:3a:87:
ef:0c:7e:f8:50:c5:ce:a0:8b:bb:c4:6c:c1:22:ee:22:4b:6e:
fa:33:8e:eb:00:b6:a1:12:cd:0c:1c:fa:9d:df:e8:45:f3:fc:
2c:73:47:63:1f:2c:d5:e0:06:9a:1f:ad:27:f6:30:8f:c6:ad:
7b:af:bc:91:d9:af:84:63:ff:ae:5c:09:20:22:07:39:08:24:
8f:17:a6:21:7c:38:5b:57:f5:7e:25:f9:67:76:45:3f:57:f1:
e9:1c:23:64:6e:45:6f:df:e0:30:d5:e3:a4:e7:9b:6a:2c:23:
a7:65:c4:62:0a:93:52:9b:0f:14:4d:9a:9f:a4:2c:2f:7f:78:
d3:41:29:58:58:50:fb:8e:88:b3:64:d1:42:7f:70:0f:cb:d1:
50:3c:fa:66:0e:8b:f3:c9:d3:f2:1f:43:89:28:fb:68:bd:7f:
f5:4f:49:e3:b7:37:65:76:8a:4d:b9:a5:fd:f9:3b:72:8d:65:
2f:ed:f6:6e:8f:00:1a:30:a3:6c:33:95:b2:7c:aa:6c:11:6e:
54:0f:9b:59:69:e7:7b:cc:35:b7:77:8e:2b:e5:76:9f:bb:14:
d2:c1:ff:38:f7:41:d7:0d:c4:f1:89:28:da:3f:08:0c:48:cd:
c3:71:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:31 2025 by rpki-client