Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: iMtaw3VsaDlj8AQ1naZHGlyUs45J/FIybqgdVEoSZBM=
Subject key identifier: 43:B4:41:9A:E8:2B:07:70:29:64:9E:CB:5B:0E:27:88:58:F9:D2:0D
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01987D89BA2D971F6EB5BCDCD56D4083F681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 11ED
Signing time: Wed 06 Aug 2025 04:00:34 +0000
Manifest this update: Wed 06 Aug 2025 04:00:34 +0000
Manifest next update: Thu 07 Aug 2025 04:00:34 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: ZQiXYyWWb9PFM0xuZqHCi4aWvQav7yODZUgI3Vt3P58=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:ba:2d:97:1f:6e:b5:bc:dc:d5:6d:40:83:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Aug 6 04:00:34 2025 GMT
Not After : Aug 7 04:00:34 2025 GMT
Subject: CN=43b4419ae82b077029649ecb5b0e278858f9d20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:82:fb:9b:3b:42:72:35:ec:6c:7b:98:65:
4b:37:e6:19:21:20:0d:b0:8b:c9:39:29:e0:21:e8:
35:38:1d:e9:e3:ee:8d:3c:17:8a:58:54:c0:cf:e2:
f5:f8:a9:01:88:ab:12:78:2d:1c:45:8f:6f:69:4d:
fd:0e:77:a5:f5:b4:c1:a7:d6:77:01:c8:3a:44:f3:
65:7b:5f:f2:c7:03:17:7a:9f:96:c3:28:44:10:49:
72:24:ff:9b:09:74:98:34:d0:1e:71:63:d7:d1:e8:
26:35:e3:ed:25:ed:f1:0a:f2:5e:7a:34:05:62:39:
7f:dc:2a:5f:58:4e:8c:23:89:ed:e1:6f:1f:c1:a8:
9c:cb:e5:b2:23:67:54:fd:24:ba:dc:a9:3d:26:a7:
4c:0e:29:81:d8:c1:36:be:d5:88:54:87:f6:61:2a:
b4:38:82:23:5d:b1:ce:29:f1:52:7a:d6:38:9d:22:
b9:91:2f:30:db:55:ad:9e:2a:33:08:12:1e:d2:36:
56:c4:28:f9:f6:1d:37:32:4b:4a:45:e0:e3:0e:9c:
03:84:fa:d0:20:4f:fc:76:52:29:22:70:b9:6b:ab:
23:38:7f:c4:33:e4:74:b4:37:97:9b:4a:f5:6a:ac:
2d:43:41:f7:77:4a:2f:b4:0e:a9:e3:80:08:f4:4c:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:41:9A:E8:2B:07:70:29:64:9E:CB:5B:0E:27:88:58:F9:D2:0D
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:09:5a:32:32:8e:c5:00:f2:7f:23:b8:91:f7:b2:72:1d:3f:
b9:93:85:4d:df:85:86:4b:96:26:f1:3a:91:f7:d1:cb:46:90:
33:13:2a:6f:99:a4:e6:12:4c:df:6b:aa:33:cc:ab:b7:8f:c4:
a1:88:a5:c0:42:9e:93:7c:9a:38:99:76:45:c9:a1:9e:dc:eb:
d3:a0:56:aa:d1:d4:be:df:15:46:e6:d3:f1:7e:2f:4f:20:a4:
d5:6b:75:fa:63:90:21:07:5d:0b:83:90:e2:8e:7e:69:64:93:
2c:74:12:0b:c3:a4:33:d2:e7:22:3c:de:41:51:bd:56:a1:63:
2a:1e:30:57:3d:00:c9:06:9d:16:2d:d6:7e:dd:21:d2:14:be:
e9:36:c5:1a:a3:5a:08:6a:d7:7e:ee:95:60:27:0f:54:47:7f:
4b:f9:bf:a8:d8:33:a8:8c:1d:d0:96:95:2e:56:63:3e:ce:c1:
d9:c0:f0:d5:92:25:85:4b:42:fa:16:cf:a1:0a:84:cf:f6:64:
0c:d6:43:a4:79:67:fb:2f:b2:e1:40:80:c3:93:93:d1:c3:49:
b8:4e:81:79:1a:63:9e:68:d3:c7:58:8e:d3:35:cb:0e:f5:2c:
f9:e9:f7:35:c3:37:98:d9:dc:d4:1b:d1:f6:ae:53:0f:5e:d2:
c4:41:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:21 2025 by rpki-client