Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
File: LF3rfkKW4vu0wB_AZKH2gYlreXk.mft (raw, json)
Hash identifier: CtRg536+aVPDP1NHDvRSCn7PHCYD46fyVTfA7gyK6e4=
Subject key identifier: 85:FC:0E:3E:3A:49:68:AC:CF:FA:C7:0A:A4:C6:59:8A:33:CB:B0:8A
Authority key identifier: 2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79
Certificate issuer: /CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
Certificate serial: 0197876AF547704720FA7A855D87B07910D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
Manifest number: 0574
Signing time: Thu 19 Jun 2025 09:00:22 +0000
Manifest this update: Thu 19 Jun 2025 09:00:22 +0000
Manifest next update: Fri 20 Jun 2025 09:00:22 +0000
Files and hashes: 1: LF3rfkKW4vu0wB_AZKH2gYlreXk.crl (hash: VCs/+82GpenOxVE+AAxyRdme0wR9NDnitZFU3pLMvMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:6a:f5:47:70:47:20:fa:7a:85:5d:87:b0:79:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
Validity
Not Before: Jun 19 09:00:22 2025 GMT
Not After : Jun 20 09:00:22 2025 GMT
Subject: CN=85fc0e3e3a4968accffac70aa4c6598a33cbb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:bd:63:04:13:86:e7:58:62:cf:c8:86:42:
d9:03:da:c2:d4:d8:25:2f:02:24:52:f8:d0:65:87:
52:a7:cd:75:3b:3f:b2:44:f1:e5:6d:fe:38:e7:17:
11:65:98:7c:30:47:62:77:d1:2f:64:eb:9b:03:f5:
3c:4a:9f:27:c1:4a:e5:f6:58:8d:26:06:32:42:d2:
e0:7c:03:36:f4:59:93:68:7f:7a:34:77:38:e9:0e:
7c:93:78:ce:b7:91:1c:f7:a6:b6:ed:15:1a:cc:f4:
90:3b:41:4b:cd:a7:4d:aa:e4:2f:0e:29:a9:c7:96:
54:9b:bf:ef:47:e4:9a:d9:fe:86:f7:e2:20:3c:4b:
92:2c:1b:1f:b5:fa:4b:03:3c:1f:89:82:8b:f0:56:
30:67:54:60:a6:70:c8:90:6b:3c:7f:72:c6:ce:be:
45:ab:d8:21:d0:37:34:ba:ba:1c:0b:e9:ea:57:bd:
8c:22:c1:9a:1e:8a:44:82:70:3e:ee:2a:95:b5:37:
9a:0b:aa:99:90:7f:8d:ff:78:88:2e:dd:ed:5c:a6:
f2:57:92:76:0b:a4:79:e8:6d:c9:33:e6:13:f3:ea:
3f:dc:01:ef:77:0b:3a:30:04:b6:fa:13:39:35:e0:
aa:6d:f6:3f:2e:5a:9c:60:15:aa:c3:7d:9a:58:7a:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:0E:3E:3A:49:68:AC:CF:FA:C7:0A:A4:C6:59:8A:33:CB:B0:8A
X509v3 Authority Key Identifier:
keyid:2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:8a:68:89:e8:f4:32:77:88:3a:2f:ba:88:7f:0b:00:3a:
ff:bf:3c:e8:d5:39:44:91:3f:01:dd:ed:bd:bb:a0:a8:8d:c2:
3e:86:53:8f:17:32:63:32:cb:6f:5a:15:77:99:63:85:9e:61:
95:ac:4b:a3:25:38:35:82:c1:70:a8:80:5f:23:ab:f5:9e:f9:
3b:64:e8:bb:30:b2:86:f9:fa:70:19:3d:45:6d:cb:6c:0a:ef:
e7:bc:be:1e:4c:22:a5:d7:99:98:95:ab:7c:39:d2:f7:29:58:
9f:87:0d:75:17:1d:59:e9:fc:cc:9a:d1:32:52:63:66:cd:62:
69:c9:d7:b0:2d:eb:c7:e6:4d:31:b7:b3:7f:f6:08:b6:ee:24:
ec:e7:59:9d:6f:d3:42:c1:f9:7b:b0:36:c0:ca:7f:04:56:41:
82:b8:32:4c:97:a3:a2:ed:50:64:34:5f:c6:de:d4:78:36:02:
af:6a:cf:42:cb:6e:1e:0d:19:4c:78:45:48:25:03:46:42:15:
dc:0e:21:c9:cc:99:ee:88:af:b6:53:8a:c0:8e:a9:25:d7:31:
44:36:d1:2b:67:0b:88:e9:10:cf:81:f0:62:dc:1c:b1:5e:b4:
24:b2:c8:f4:f9:7e:11:10:7b:5d:34:ac:e8:42:a2:d4:01:4b:
65:d3:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:01:20 2025 by rpki-client