Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: Nhg0SpL4+sNIIGVoRCCP97PUKkjPwpILcLijimXqhAE=
Subject key identifier: 04:06:0B:58:FA:EC:40:18:C0:67:1A:43:7A:A9:59:8F:DF:A8:88:CE
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 01977609D151AABF230FD9A2D1DBA2F78E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 1224
Signing time: Mon 16 Jun 2025 00:00:44 +0000
Manifest this update: Mon 16 Jun 2025 00:00:44 +0000
Manifest next update: Tue 17 Jun 2025 00:00:44 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: 3RsAdG/W6hSABo2su1RYRiIE4RJCe8O5hk1cUONZYtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:d1:51:aa:bf:23:0f:d9:a2:d1:db:a2:f7:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Jun 16 00:00:44 2025 GMT
Not After : Jun 17 00:00:44 2025 GMT
Subject: CN=04060b58faec4018c0671a437aa9598fdfa888ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:34:2e:04:49:38:22:69:6a:46:4d:5a:e2:
3f:4f:7a:23:84:c0:ec:7f:7e:dc:b0:0d:40:89:69:
4d:07:3c:25:db:92:8f:df:f3:7f:5d:5d:c2:ec:02:
79:c3:1e:63:d4:ff:32:56:0e:97:ab:4a:f1:85:95:
66:9f:73:11:a9:38:45:96:ec:63:e1:52:af:56:12:
0a:94:e3:f1:90:81:04:a5:8d:0c:c1:87:f2:51:ad:
0f:74:4f:85:f4:60:7a:af:de:18:bb:cc:b4:d2:fe:
c8:93:3c:f7:d6:19:36:5f:bb:7a:96:db:02:7d:c9:
7d:6c:c6:b4:37:e4:d5:48:d1:f1:fa:d8:11:b8:4d:
94:04:a4:1b:bd:7b:f1:ff:40:b0:9d:5f:c3:54:d7:
d9:cd:02:8e:6c:ee:95:fc:70:c3:ab:f5:8d:5a:f2:
78:ad:30:f9:83:86:e4:52:7d:f2:bf:75:ca:b9:68:
66:4d:0f:ae:9d:c1:bb:50:c4:c7:27:f2:65:a9:1f:
56:0b:5c:2c:b0:6f:37:ed:7a:69:da:4c:c3:0e:9e:
1d:60:8b:e1:19:27:d4:71:20:9c:ad:18:46:13:72:
4c:46:c2:1f:e0:4b:ab:0d:24:95:b7:00:d2:6a:d5:
3e:5b:c4:eb:c8:d1:55:98:b5:d9:b7:f3:72:cd:eb:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:0B:58:FA:EC:40:18:C0:67:1A:43:7A:A9:59:8F:DF:A8:88:CE
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:3c:c5:cf:e1:42:01:f8:ed:5b:1f:f8:be:8f:9a:7b:e8:
45:aa:15:33:d9:7c:a3:55:00:89:8a:11:71:5a:fd:4e:46:54:
ee:6f:74:94:78:a3:fe:e0:f8:aa:56:17:45:a1:f4:36:d6:af:
49:89:db:a9:95:5e:82:e9:f5:a4:2f:48:ae:30:d5:69:ca:5a:
99:cd:3a:f0:99:3c:a2:a7:2c:0b:db:cc:93:bd:35:c9:da:68:
70:df:68:d0:2e:fe:78:74:75:90:36:15:39:b3:86:04:5a:b4:
f9:48:80:19:25:e3:cc:cf:23:07:5e:79:c9:e3:55:fc:d4:a7:
80:21:cb:67:bf:ad:41:50:37:a7:23:d4:78:4c:29:aa:7d:6f:
48:a6:35:8e:cc:d4:10:13:2e:69:af:24:af:bf:f5:80:81:d5:
ab:fb:a1:3f:d5:bd:a6:3d:95:5a:cf:c6:39:02:32:af:a0:9d:
4d:c3:9f:96:fe:c3:77:3a:42:07:a8:b3:71:18:9e:12:90:8c:
16:47:a0:39:d0:c2:0b:d7:c9:6b:dc:12:58:1b:df:94:7f:a6:
ac:76:f3:d5:93:22:9c:25:c2:bd:30:a3:9f:3f:64:c3:a6:cb:
9b:bf:ef:26:76:1a:4e:5e:d7:be:25:7e:b3:0a:2f:fe:53:fc:
ce:0a:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:07 2025 by rpki-client