Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: hyNwfUo+bN6gIHzp9zVxBHdCBBm9o0cG+ItqVoqLmfs=
Subject key identifier: 2F:DF:F6:30:54:DB:5A:1A:65:D2:81:53:2C:4D:73:03:83:8F:CB:40
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 019776E654522B2D3D28C7F4441F1DE80CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 158F
Signing time: Mon 16 Jun 2025 04:01:35 +0000
Manifest this update: Mon 16 Jun 2025 04:01:35 +0000
Manifest next update: Tue 17 Jun 2025 04:01:35 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: dKZKAxsLXK876XS81g59eiG1Pc945+tEHb52S4kpq68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:54:52:2b:2d:3d:28:c7:f4:44:1f:1d:e8:0c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Jun 16 04:01:35 2025 GMT
Not After : Jun 17 04:01:35 2025 GMT
Subject: CN=2fdff63054db5a1a65d281532c4d7303838fcb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:98:a3:04:4c:8f:d7:6e:76:cb:65:0d:92:
ff:6a:00:10:4e:a0:b4:64:94:1d:4a:65:17:83:ed:
b0:8f:af:cb:1d:ae:08:3d:ca:66:8f:ce:3d:2f:c4:
4d:89:62:3e:9b:28:8d:77:0d:a2:1c:ba:5d:d5:ff:
0b:81:4b:4d:80:6b:d3:66:c4:ad:39:a1:72:ff:6d:
08:63:67:d7:8e:b9:20:04:62:5a:99:80:29:2f:5a:
00:fe:3e:cf:98:a8:d4:5e:e1:7f:91:7b:ab:69:ad:
3a:98:50:f6:50:1c:10:55:32:51:e4:e3:37:e1:09:
c4:31:52:4f:6e:35:e6:96:f2:6c:e7:4d:c5:02:db:
41:b4:90:e0:5f:aa:83:6f:6b:7a:96:5b:ad:a5:82:
48:6a:04:c2:43:d6:4e:c1:5e:c8:8c:2b:5d:95:6e:
2d:dc:27:1b:1a:dd:5d:ac:dd:e1:97:19:9c:0a:a3:
df:e0:ea:8b:26:84:8b:6e:27:2a:bc:d5:63:2a:d0:
53:99:c1:9d:b7:24:22:d2:b4:b7:c0:d6:c9:f4:f0:
60:f5:a4:f9:d5:01:ce:84:1b:a7:ba:9c:6f:a6:59:
cc:d8:4a:59:47:f2:cf:20:db:dd:bf:23:54:e8:0d:
90:4a:f6:18:20:bf:6a:3e:0a:aa:c3:42:71:6a:05:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:F6:30:54:DB:5A:1A:65:D2:81:53:2C:4D:73:03:83:8F:CB:40
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:bb:81:04:ae:00:4e:0b:86:91:37:d0:95:6a:fc:ab:11:
71:f3:7f:68:3e:54:25:ef:c2:27:a0:4b:b8:b7:cb:4a:e2:0d:
ab:1f:62:e1:0a:c2:9f:4b:91:43:a9:51:5b:9f:1d:06:b6:bb:
57:88:f2:b7:ae:12:db:12:90:6d:9d:a7:74:eb:f5:bf:be:f2:
f7:d9:9e:49:fb:f0:b3:80:29:22:c9:8e:ac:8b:01:88:b1:26:
72:eb:b8:e6:97:19:83:c9:0d:5c:f3:f6:9d:60:11:50:d8:50:
41:22:94:77:43:6b:da:25:ed:fb:a9:92:8e:be:ec:6c:6b:01:
15:f4:ae:7f:6d:ca:41:eb:e2:c3:fa:9f:a4:0c:ce:b7:bf:ab:
11:4d:fe:87:c0:8c:f2:b5:f9:b2:e3:f2:e1:64:1d:2b:d7:ca:
3f:4c:66:54:5c:92:eb:b2:1a:7e:df:17:67:f7:86:8d:b6:cc:
f1:ee:86:6f:6c:48:b7:d1:10:12:dc:12:b0:19:fe:0a:72:10:
53:fc:36:a1:8b:28:24:e9:d7:82:c4:eb:58:74:02:96:a3:fd:
2c:87:61:6f:91:52:0c:18:6c:e4:e7:7e:6e:af:1e:d3:3a:e8:
28:35:eb:95:04:d5:26:f4:08:7e:9e:b1:55:a1:10:04:aa:19:
f9:30:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:44:45 2025 by rpki-client