Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: 61EkjwR8WbZVqEgGPLENrktcBnjC9nTsePjAzJYGHgE=
Subject key identifier: C8:CE:D0:80:52:15:0D:23:AF:BE:DF:FA:48:46:B9:EB:35:EF:13:C1
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019873E1F9D05BBB816F8C429BACC55DD968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 15A3
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: cltTUfO4MR2aPszrP3nvQ0wvsDUx8mQ56OnA5DpYsvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f9:d0:5b:bb:81:6f:8c:42:9b:ac:c5:5d:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=c8ced08052150d23afbedffa4846b9eb35ef13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:03:39:38:e8:2b:79:a3:91:d5:3c:fe:66:
bf:53:41:70:0d:f1:cc:7e:2e:42:fc:d6:26:f9:61:
d1:2f:33:f6:30:74:4e:ee:91:7e:23:0f:f9:49:29:
ba:c6:62:ed:26:5f:cc:ff:83:c0:bb:21:df:c2:9d:
14:fb:87:b9:61:ac:d7:a8:af:4f:e0:d3:1e:03:b9:
01:7a:f4:44:40:93:5b:25:ec:69:16:2c:e5:08:01:
a7:c1:b2:31:54:47:ca:55:c1:f2:5b:aa:4b:c1:bd:
a5:7d:12:2b:8b:b2:1e:8c:e3:8c:c0:02:77:b3:1d:
38:fc:0f:d2:23:6c:17:01:aa:2f:fb:4b:69:fe:41:
14:27:76:b7:1d:15:e6:cf:c1:8a:b6:24:97:c9:6a:
88:38:5a:0f:b1:79:24:44:4a:48:c7:3a:c1:49:91:
82:74:03:bc:09:5b:00:1f:f0:3f:52:67:51:ae:52:
60:54:63:87:aa:56:ee:2a:74:81:10:43:df:1d:14:
5c:e1:75:d4:78:40:ba:79:5d:81:49:a7:1c:e6:4c:
0b:54:db:d8:ff:63:5a:cd:27:f4:d0:b8:f5:21:47:
ba:a9:de:88:d3:e8:d7:96:25:da:36:78:76:45:8f:
7d:16:40:ed:c0:2e:b7:58:91:43:8b:b8:b6:af:5b:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CE:D0:80:52:15:0D:23:AF:BE:DF:FA:48:46:B9:EB:35:EF:13:C1
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ba:6c:94:d5:92:0d:a8:b8:2d:cb:7d:52:3c:f4:d2:44:84:
cc:a2:04:9c:ea:da:c7:2b:ef:28:6a:72:1e:f5:23:43:be:6c:
f5:4b:71:cf:25:fa:41:b9:c5:98:3a:6b:fe:c4:a6:70:88:8c:
95:e4:51:c6:92:51:37:51:2f:b4:b8:23:7f:7d:e3:23:b4:26:
08:8e:d7:2a:46:85:61:bb:be:72:80:5b:7c:2f:03:2a:4b:ff:
7d:4d:79:e4:48:75:5a:12:36:be:3f:0e:e4:10:ec:bd:dc:d5:
67:87:22:ed:94:14:c6:27:ab:cf:cb:df:41:a3:1c:ae:6d:47:
27:28:49:10:20:02:57:fa:80:bb:d4:1d:01:7f:c3:ea:0f:33:
9c:80:49:06:fe:fb:c5:6e:c2:24:85:ed:b7:4b:db:4a:ce:40:
21:5f:ca:5c:3a:00:10:20:c5:98:0f:39:a0:ec:e9:c0:45:c9:
a9:48:19:cd:eb:52:f3:0d:66:e8:7b:54:e6:e8:bb:a5:6e:fb:
24:49:6d:b3:57:38:4f:b6:e8:4e:10:7c:f5:62:f9:f2:c2:70:
29:69:9f:6c:66:09:8a:0a:de:3b:96:24:88:5c:47:27:78:25:
ce:da:35:3f:95:5f:4d:c8:25:ba:87:7f:ab:82:1b:83:e7:a9:
5e:4e:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:45 2025 by rpki-client