Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: HHZN7dWTSRZrxHk1iM1FbdEmOXwptrHKLHruW83jr/0=
Subject key identifier: F4:51:8C:FD:65:43:F7:39:9F:1B:00:DC:08:1A:AC:C9:96:6A:4D:AF
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 01976A05B35A4A26E3BEA1CA77BB99779C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 115D
Signing time: Fri 13 Jun 2025 16:00:47 +0000
Manifest this update: Fri 13 Jun 2025 16:00:47 +0000
Manifest next update: Sat 14 Jun 2025 16:00:47 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: m828zPYPsijGo5rIH+IVU9CNxRUFeTwAMcFN6l/wq2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b3:5a:4a:26:e3:be:a1:ca:77:bb:99:77:9c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Jun 13 16:00:47 2025 GMT
Not After : Jun 14 16:00:47 2025 GMT
Subject: CN=f4518cfd6543f7399f1b00dc081aacc9966a4daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:1a:01:64:f9:03:ed:75:64:4b:af:8f:52:
ed:24:19:76:9c:86:fd:ce:d3:09:1c:42:d5:d4:ab:
60:a3:de:4e:55:9b:e0:9e:e6:16:e7:19:c7:06:ee:
82:b2:7c:56:af:c4:3e:fd:d4:86:f3:4f:35:d6:47:
7d:62:f0:3f:13:e7:06:e4:d4:2d:af:bc:a0:f6:3c:
24:4c:fa:59:b3:ec:9a:69:32:ee:88:d3:27:22:32:
b9:30:a3:d4:94:62:c2:19:58:dd:05:98:a7:b9:a3:
f9:37:17:39:57:ea:e1:4f:83:85:2f:36:7a:3b:5c:
34:54:df:7f:77:e6:27:20:1c:a5:36:0c:e3:f9:91:
67:65:e8:f6:bc:5b:f2:e2:8f:ee:77:a5:05:e1:8c:
31:c1:32:61:31:f9:2c:64:b7:82:c6:9b:a3:c2:21:
da:66:16:ec:f4:98:e8:d4:a8:9a:a9:8e:62:58:15:
5c:f1:d1:c1:7d:f2:11:90:99:f6:48:c9:c5:0c:69:
23:3a:94:f0:02:7a:3b:eb:22:06:f9:6b:f2:cf:81:
4b:0b:a4:42:cc:9e:c5:b8:af:79:17:56:27:6d:66:
92:69:8a:0e:25:a5:0c:c1:af:17:74:0d:71:92:bb:
7a:fb:f4:44:da:04:1b:ab:95:61:ee:37:3e:c6:85:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:8C:FD:65:43:F7:39:9F:1B:00:DC:08:1A:AC:C9:96:6A:4D:AF
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:3b:54:1d:e0:61:ae:69:09:eb:42:3e:1a:38:8b:27:6b:
3e:13:33:31:25:e0:23:5c:35:ba:5d:10:d0:3e:f1:15:03:21:
bf:b6:80:ca:4f:89:03:0a:83:8d:92:3d:43:99:5e:a4:95:aa:
da:85:f9:6e:05:14:f9:4b:09:a6:4a:ce:d8:4a:36:d2:23:d4:
d3:9f:23:79:eb:37:e4:e7:0e:89:6b:bf:a1:f9:41:07:27:1a:
bc:44:46:af:44:f3:15:c4:b3:8b:7c:10:09:f7:8d:11:60:f8:
1f:0d:80:bb:54:a2:be:ab:73:69:40:0b:fc:29:15:e8:f5:c9:
20:23:a1:a1:56:cf:ec:fc:5e:e1:01:1d:3d:45:b3:15:ee:ae:
e9:61:a9:1f:d0:30:df:fc:19:1a:20:60:5d:aa:cd:4e:37:fa:
0d:9b:c0:ef:b4:30:8d:59:6a:93:ba:dd:46:09:71:0b:f1:b0:
f9:51:01:8b:43:8b:7b:72:61:d4:80:f6:a3:df:dd:03:45:f3:
12:9e:5c:a9:41:e0:f7:8b:50:6f:f9:3a:45:4b:1b:8e:8f:e8:
cf:0c:a9:d7:c7:3f:a6:52:43:52:b9:7f:ac:50:4e:33:aa:df:
f1:67:8c:64:fb:67:8b:25:af:9b:f9:fd:e1:3d:ed:39:7e:3c:
52:31:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:52 2025 by rpki-client