Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: OOVhpQ0ESHlvzqTlYG5htPW4Zjtn045PuvIzOy8DxA8=
Subject key identifier: B7:35:18:07:55:C7:F5:60:0A:AD:49:58:33:CD:2C:5A:0C:FD:71:E3
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 0197684DE9B54E646CD35A469ECF63F88EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 08:00:25 +0000
Manifest this update: Fri 13 Jun 2025 08:00:25 +0000
Manifest next update: Sat 14 Jun 2025 08:00:25 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: wwi7DQTBIMAuydPKnAY5YsL0gJ0hNP1Sba7mp1SaQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e9:b5:4e:64:6c:d3:5a:46:9e:cf:63:f8:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jun 13 08:00:25 2025 GMT
Not After : Jun 14 08:00:25 2025 GMT
Subject: CN=b735180755c7f5600aad495833cd2c5a0cfd71e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:34:2f:be:e9:44:dd:e2:82:d0:a4:49:20:
95:cb:75:f4:06:41:3b:27:41:50:bc:32:69:0c:73:
34:7b:f2:cf:d3:87:b3:aa:b8:ec:9a:71:3e:38:bc:
56:d8:17:a7:8b:63:6e:9d:63:46:a5:e2:97:51:78:
e7:b3:76:27:34:51:6b:c0:eb:29:9b:85:96:90:33:
c8:66:91:95:50:12:41:cc:0f:d4:c1:16:51:2a:15:
f2:42:3c:4d:11:52:db:5b:a1:7b:f1:34:89:06:32:
1b:f8:da:bd:ed:e0:c6:3e:f2:42:5d:59:19:80:21:
4a:af:f3:b7:6a:69:10:a3:c8:fe:07:26:d2:55:ae:
6b:60:0a:e7:db:fa:9f:8f:a9:84:cf:fe:96:b2:06:
81:ab:7b:8a:55:f9:b4:9e:03:50:54:c3:54:da:a6:
ea:f4:03:cf:c0:62:7f:5d:5c:86:11:10:84:3f:7b:
e9:8e:0a:13:b1:dc:4b:ca:1d:33:ed:54:b1:6a:46:
54:d2:63:cf:61:ee:61:c6:b8:14:0c:69:df:86:fc:
cc:55:bf:70:cf:b7:74:69:04:5b:e5:90:cf:a6:3a:
07:06:27:89:69:78:eb:1b:bf:97:79:e2:37:29:53:
b9:9b:7d:2a:aa:56:f4:5b:35:74:3d:d6:3f:73:e2:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:18:07:55:C7:F5:60:0A:AD:49:58:33:CD:2C:5A:0C:FD:71:E3
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:23:e8:d5:ef:b7:2f:a9:c5:69:0d:96:dd:4f:05:06:b4:
a4:6b:51:39:e5:99:5d:94:47:fa:ea:66:3a:69:b4:c5:66:53:
b0:40:8d:ad:47:22:bb:28:50:d0:0c:17:42:53:1c:d1:83:ca:
06:0d:5d:cc:b2:4d:73:d9:e6:45:30:ec:f2:bd:6a:75:c2:0b:
54:d3:6e:b7:68:4f:c1:09:43:d1:8e:97:be:db:96:f2:47:d1:
1a:e8:35:3b:eb:a1:be:60:f4:d1:61:52:f3:78:66:72:0a:db:
ae:0a:e2:e0:65:e9:30:18:07:d7:43:b2:da:7a:01:21:cb:47:
0b:2b:7e:77:79:33:62:6b:f3:3c:87:90:65:e4:96:31:22:6e:
d5:37:b6:f2:4c:a4:42:73:e1:a6:9b:a1:3c:5e:34:66:e6:4f:
5f:e2:4c:b1:eb:19:77:1f:a9:8e:05:9f:f6:cd:5d:59:e4:c1:
eb:cb:15:b1:ec:c2:57:34:81:72:7e:98:38:f3:ec:2c:9c:00:
15:03:86:87:84:71:fd:63:78:1f:da:29:7a:24:ad:a3:f2:b2:
c3:0c:98:65:bb:20:9d:a2:88:3f:13:c8:71:86:9b:bd:63:61:
a6:d2:ad:75:22:93:61:6d:26:21:0a:56:1e:d0:4c:76:75:eb:
29:96:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:48 2025 by rpki-client