Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: RwkFY0Yzem9Le7o855PbpcTXwz4nkVgtJCtsFiksifU=
Subject key identifier: 08:14:C3:22:6D:1D:F4:82:F1:C0:F1:5C:3B:4D:43:42:14:30:94:60
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 01976F2C97E63E34D820BE2A56EAABED9036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 08A5
Signing time: Sat 14 Jun 2025 16:01:22 +0000
Manifest this update: Sat 14 Jun 2025 16:01:22 +0000
Manifest next update: Sun 15 Jun 2025 16:01:22 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: uKIoEsH4ThXONkYqx7nCK95SlnaqQr1wPK5y9jtrrRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:97:e6:3e:34:d8:20:be:2a:56:ea:ab:ed:90:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Jun 14 16:01:22 2025 GMT
Not After : Jun 15 16:01:22 2025 GMT
Subject: CN=0814c3226d1df482f1c0f15c3b4d434214309460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:bd:f5:e6:bb:ce:f2:c0:79:66:56:1b:7d:
95:80:76:2b:1f:af:47:d7:9d:6f:10:fb:96:89:a5:
51:e9:d3:2b:04:a8:a6:79:b2:f6:2c:55:a6:28:1d:
78:af:86:eb:f5:ed:84:ed:03:2e:dc:06:5e:87:f2:
2c:27:7a:24:98:3b:9c:c6:43:f7:6b:cb:45:5a:ea:
f5:76:26:8c:ff:d3:92:0b:fb:60:b0:0f:eb:cf:62:
31:8f:ca:df:cb:94:bc:f1:88:01:5f:bd:c2:39:1b:
f2:6b:97:01:c9:6b:f7:ab:d8:fe:c3:3b:a6:5d:65:
fa:9d:87:9e:f6:17:39:17:b2:3e:52:28:cb:92:17:
ce:b1:a9:b2:f5:e4:27:fa:3e:2e:33:23:38:16:5b:
c9:ce:47:d3:4e:f3:ee:ff:f9:7c:d0:8a:52:ff:bf:
53:e3:d8:c7:eb:b5:40:66:03:4e:3d:aa:02:a9:b4:
35:3c:30:75:28:f8:63:b1:b4:4a:a6:a4:f7:c2:0b:
8d:98:2c:c6:7c:fc:a7:b1:a5:87:af:df:c3:40:f3:
d3:ba:73:31:07:21:31:cb:5e:ea:e0:3c:55:e0:9a:
1d:36:e7:92:d8:e0:df:9d:b1:e1:50:e7:27:9a:7f:
11:60:69:dc:ff:c2:bf:2c:0b:a3:9c:70:b2:02:77:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:C3:22:6D:1D:F4:82:F1:C0:F1:5C:3B:4D:43:42:14:30:94:60
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a1:be:e5:36:0a:d4:f7:4f:e6:d1:d4:93:6a:81:7f:1f:56:
64:a8:a5:04:82:f8:6b:7e:a0:da:ab:cd:a6:d6:01:a5:6b:0c:
cd:c3:dc:df:84:39:66:a9:bf:4e:ca:e3:bb:33:85:a2:f7:b3:
e9:77:9e:2f:c5:be:40:c9:5f:93:7a:68:a8:9e:9f:aa:23:4c:
9e:e5:55:fd:f4:2d:43:82:78:81:dc:84:74:1e:38:4a:d4:7c:
82:43:b8:48:bc:c5:14:d9:8c:11:27:ba:99:27:a7:00:0b:99:
2e:f2:dd:f5:f4:af:0d:54:2b:5f:b0:52:8d:e1:c7:1e:86:ff:
88:ab:a7:87:05:bb:00:8f:09:9a:7c:61:0e:5d:70:a0:50:45:
48:6a:d4:46:63:19:af:bc:6a:ae:72:21:b4:20:da:d8:db:f2:
99:3a:d8:cc:06:12:30:14:b5:76:e6:80:f3:95:8d:62:3e:de:
ae:6d:02:d4:5f:df:17:db:4e:25:79:50:5c:00:b4:96:bd:1d:
72:02:f4:dc:26:7d:79:dd:42:98:43:95:35:08:04:02:97:3b:
3d:9e:0a:ac:8d:77:1b:69:91:24:07:0e:20:f5:25:0b:cc:45:
dd:55:7c:d7:7b:86:e6:2b:21:69:5c:c9:de:a0:bc:a9:78:4e:
e2:7a:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:16 2025 by rpki-client