Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: 1Jv8Fc58jQqlAVh/MAXDz9+7p4bIsL69wG/JyW77gyY=
Subject key identifier: CB:8A:EB:49:F4:D7:45:24:19:A9:FA:7B:F2:E6:95:71:D0:2A:76:42
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 01987D8A08E78D73DA80B2A72344AFAB2142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 04:00:54 +0000
Manifest this update: Wed 06 Aug 2025 04:00:54 +0000
Manifest next update: Thu 07 Aug 2025 04:00:54 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: DtWHN3SjWskgbeVAHWnbrokNpB1VKZs8v8rA90sQJlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:08:e7:8d:73:da:80:b2:a7:23:44:af:ab:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Aug 6 04:00:54 2025 GMT
Not After : Aug 7 04:00:54 2025 GMT
Subject: CN=cb8aeb49f4d7452419a9fa7bf2e69571d02a7642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:7a:ea:d5:b8:ee:b6:b0:50:0f:12:f5:15:
be:13:ee:87:fe:19:92:59:ed:26:5f:56:2b:fb:92:
22:9f:35:70:72:48:cc:b9:f2:b3:8d:be:b9:7b:14:
5d:aa:c4:4d:29:74:5e:42:02:24:21:29:49:db:ee:
d3:c4:fa:13:55:1b:00:8a:f1:fe:a7:bf:8c:cc:86:
dc:38:ba:b4:ec:13:a4:c1:6d:64:5a:1c:94:84:09:
c2:c1:61:ac:92:5e:3e:57:9e:c4:15:d6:4b:2c:f7:
85:4f:6f:c6:f1:00:12:d5:37:dd:8e:ad:77:35:1c:
f3:08:c6:d7:ae:5a:ae:85:da:45:74:f4:ad:21:85:
0a:0b:3b:2e:89:3d:fa:1a:64:10:c8:bb:84:cc:16:
f4:c1:2f:8f:a5:23:8f:5a:36:94:65:a8:d6:f9:9f:
fe:03:a2:1c:28:24:98:81:7a:ae:4a:6f:00:ea:e7:
00:9b:65:a4:f5:4d:05:9c:e9:74:8d:a6:0e:9d:c5:
1f:f8:f2:29:84:06:eb:e1:a8:37:e4:71:d8:50:a0:
36:a9:ae:55:43:85:55:50:32:9d:02:32:3f:47:2e:
f7:4e:f9:28:e5:a8:ee:45:0f:f4:a6:1f:5c:52:4e:
2c:3c:ee:cf:4e:96:4e:58:e7:76:51:79:1e:bb:e3:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:EB:49:F4:D7:45:24:19:A9:FA:7B:F2:E6:95:71:D0:2A:76:42
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1e:35:ce:c4:49:ce:e3:4f:5f:33:08:02:fd:d5:d8:d8:d2:
fc:9e:bd:59:37:fb:6a:22:4f:a9:ff:06:17:81:8a:b6:15:b8:
d9:c8:2d:4a:0a:a0:65:87:9e:ca:18:cf:b1:b0:54:83:e9:6d:
b5:18:37:93:66:e8:9e:a3:f8:f8:d4:01:f5:05:2a:7c:2c:7e:
31:8b:09:2d:9e:c8:e0:a8:57:b6:54:50:87:ae:d6:75:51:4b:
2d:9d:33:a0:a2:d8:88:80:ef:ff:22:a5:58:f4:21:28:3d:d2:
2d:a0:e8:a5:0f:37:02:8a:14:9c:39:cb:ce:8b:db:af:83:00:
74:8e:2b:cf:48:07:53:09:92:de:7e:aa:cb:f5:b5:15:e0:17:
87:2c:8b:dc:67:f9:be:3f:34:b8:48:8c:c2:8a:74:60:c4:e2:
17:98:78:a1:81:30:62:0a:35:75:c7:bc:fb:e4:bb:cc:57:07:
77:fd:88:4e:fb:25:79:7c:6a:fb:37:27:5d:9b:af:b2:bf:41:
bb:d4:f0:db:cd:03:ee:ea:b6:56:31:c3:c4:fd:f9:6f:5b:5d:
76:30:50:ff:3e:0d:81:f8:93:95:03:49:da:77:37:bb:04:f7:
45:3d:9f:88:23:f3:ec:dc:a7:4c:2a:d5:ed:4e:82:ba:a5:06:
84:32:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:58 2025 by rpki-client