Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: GB1gtW9m3SlJDOwU6B+2/MoJhtiNiicgwV4qik2cdZA=
Subject key identifier: 8C:84:1F:AE:0D:72:72:98:B6:0C:EE:80:44:45:52:96:EA:DC:FE:45
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 01976E86F1C279F5F7CB7B6BD26EE10E261E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 05FC
Signing time: Sat 14 Jun 2025 13:00:26 +0000
Manifest this update: Sat 14 Jun 2025 13:00:26 +0000
Manifest next update: Sun 15 Jun 2025 13:00:26 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: Nkou1XP69m07YGZb47jazWO55DICH0ts+9SbljV/pno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:f1:c2:79:f5:f7:cb:7b:6b:d2:6e:e1:0e:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Jun 14 13:00:26 2025 GMT
Not After : Jun 15 13:00:26 2025 GMT
Subject: CN=8c841fae0d727298b60cee8044455296eadcfe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:8e:d9:06:9d:86:99:2b:dc:b5:83:37:13:
91:5d:b0:05:7e:a4:c6:2d:8f:91:2b:be:67:d0:69:
e9:eb:85:15:e5:c9:c4:86:a7:8d:bb:24:06:89:58:
cb:d7:0f:40:5c:c9:d7:64:88:2b:85:fb:40:56:0a:
0e:6f:c6:f7:4e:31:7f:bd:a3:97:78:a5:bc:92:57:
f9:2c:16:4c:0e:7e:2a:22:6b:45:b2:60:06:04:75:
fd:12:65:38:e8:4d:fe:80:dd:13:6f:1a:0c:91:bf:
d5:21:03:db:b9:fc:2d:3b:43:39:c0:27:f8:4a:9c:
57:66:fa:dc:9b:39:4c:81:28:65:cf:ff:0d:14:64:
a7:2d:93:8f:6c:db:ab:d8:cf:bc:bd:3c:0e:6d:c9:
2b:9f:56:09:82:46:3d:c3:f2:51:9f:69:12:b0:ad:
12:a6:1d:b0:7e:4e:e9:74:50:1a:0b:a7:ec:2b:7e:
0f:e7:6f:1e:53:de:f3:c1:2b:1e:cd:33:fb:cc:67:
09:d6:8a:a2:6f:dc:ae:3d:f4:5a:b5:b2:b8:aa:25:
7d:9b:ed:8e:7f:1e:00:e6:9e:28:4c:e5:20:e4:25:
c4:24:a6:08:df:06:bd:73:be:27:c3:4d:05:cb:a2:
90:e6:b9:e2:da:02:50:2d:48:71:28:bb:24:f2:1f:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:1F:AE:0D:72:72:98:B6:0C:EE:80:44:45:52:96:EA:DC:FE:45
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:bc:c3:41:78:f8:19:f2:03:14:0c:06:cd:9c:5a:9a:15:
3d:bf:3b:23:0f:b2:5c:c1:17:1a:7f:7f:86:d7:dd:5e:00:09:
6a:22:15:3a:28:83:cc:d6:ff:d2:6c:ee:de:b5:ea:f8:9c:27:
26:3e:f8:9c:8d:bd:cc:a0:89:90:00:60:ce:f7:72:67:af:0a:
05:2a:1c:7d:b1:3f:d9:5c:5f:10:ae:86:ba:b1:e1:29:06:a3:
d9:b0:22:22:87:31:02:06:8a:68:fd:28:04:f1:73:e7:b4:95:
c8:bd:90:60:03:e3:ac:c4:3b:cb:79:6b:ef:60:fd:14:da:f9:
78:ad:10:54:45:2b:e2:37:d3:d4:48:54:e2:54:f5:ec:4c:2c:
bb:6c:50:cb:b2:3e:3d:fe:25:d6:5c:0f:62:18:e6:01:53:16:
ac:9a:13:df:f4:87:ae:6e:92:d0:8a:df:00:7c:b9:85:b0:83:
29:64:ba:76:42:53:20:19:68:f9:fb:71:0a:87:26:26:f1:b7:
55:9a:13:f1:49:d8:44:42:05:d8:8b:08:9b:6c:8c:dd:7d:62:
d1:17:49:50:c0:cc:93:1e:7b:cf:83:80:9c:4b:b1:f3:c8:86:
e2:94:93:10:88:48:27:17:d5:b9:e5:e8:2d:f4:f8:7f:9c:87:
29:8f:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:08:45 2025 by rpki-client