Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: zIKCVsdilt/WtxEgJXzlSziw26vnhkRxYJDiN5YgewU=
Subject key identifier: AD:F5:A3:FD:F8:5C:C6:8B:EB:42:31:EE:C9:56:B9:14:EA:5E:52:4E
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 01976F2C2FB49CF134CA3989F1F3DC723C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0CA7
Signing time: Sat 14 Jun 2025 16:00:56 +0000
Manifest this update: Sat 14 Jun 2025 16:00:56 +0000
Manifest next update: Sun 15 Jun 2025 16:00:56 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: LxlpiQAoUbTCd9Mq4BiOj7CYUElmULBgJaGjQbO5H+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:2f:b4:9c:f1:34:ca:39:89:f1:f3:dc:72:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Jun 14 16:00:56 2025 GMT
Not After : Jun 15 16:00:56 2025 GMT
Subject: CN=adf5a3fdf85cc68beb4231eec956b914ea5e524e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:9f:61:50:a9:40:2c:cf:71:ad:f9:27:5f:
50:45:2c:45:c7:30:8b:6e:18:6e:86:c5:b5:78:d0:
cb:76:fb:8a:e9:57:59:4a:94:49:57:7c:70:31:6d:
f5:68:50:52:5a:53:84:98:19:26:ed:2f:7f:b5:56:
f9:8e:4e:a7:95:28:ac:22:c1:5f:e2:ca:5d:f8:57:
9a:a3:ea:34:e6:31:57:48:01:d7:6a:0b:6d:0d:3b:
6f:62:ab:65:ff:cc:3e:fa:75:8f:f2:d4:83:79:ea:
08:ba:f5:31:58:59:1a:f6:de:5a:66:ad:65:4e:b3:
ef:3a:54:b1:d7:28:bc:e5:2f:7a:c0:27:89:e2:45:
a7:98:01:20:ed:f8:cc:32:4e:cd:f9:55:5d:c3:d5:
fc:fd:7a:a1:ef:8b:14:e8:7c:fc:18:3b:79:db:77:
31:d7:c2:08:a6:e5:a9:73:bd:ea:ae:52:dc:f6:ca:
e5:6d:55:0d:c9:c8:17:c5:c4:b9:2e:62:da:a3:f7:
ce:4a:7c:e8:85:21:b7:08:8a:ac:49:7d:9c:8a:8a:
e7:c0:f3:41:3a:96:5f:e3:a7:e5:37:d9:0c:8f:9c:
77:ca:84:63:9c:8c:67:a1:05:a8:42:0a:5b:66:dd:
c6:51:fc:15:31:f3:a2:cf:0b:bf:95:6b:33:47:11:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:A3:FD:F8:5C:C6:8B:EB:42:31:EE:C9:56:B9:14:EA:5E:52:4E
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:07:03:a6:f7:1a:8a:7c:d4:2a:ce:6f:92:ce:17:64:12:
49:97:70:d4:90:08:84:bd:f8:d5:b7:8a:db:3e:4c:6b:5f:ea:
e8:3a:93:d4:76:38:0b:1b:f5:5b:6a:b1:30:db:58:ac:73:54:
85:81:40:30:ca:5a:56:e3:ae:d9:f1:27:59:21:94:bb:11:6f:
bb:ac:5f:97:42:b9:70:c9:dd:89:2e:cb:87:d8:ac:85:a5:5b:
6d:84:d4:06:87:65:ff:cf:ed:b7:50:4b:9d:66:47:ff:28:cc:
c0:2b:cd:31:52:0e:1f:e8:e8:21:6d:ec:7d:73:93:40:0b:8e:
1c:2a:89:d2:9d:07:1e:83:88:d8:01:7a:ba:7f:08:c2:db:5d:
9a:e6:08:64:76:66:3d:43:55:fc:4d:8e:2a:be:ff:00:f8:d8:
4a:02:bb:11:7b:77:dc:bc:2e:e3:88:6c:db:2f:54:39:67:c8:
8e:27:20:1a:57:bc:c3:10:9a:4e:01:b4:40:4d:17:19:84:26:
1d:d1:8b:0a:f0:cb:d5:5a:a8:a0:63:2e:18:dc:09:bc:5d:37:
b3:b5:4c:e8:80:cb:e2:c7:44:32:4c:27:31:0e:47:5c:7d:37:
f8:fc:21:e2:50:78:83:7e:f3:33:b0:89:41:75:03:a5:9a:a1:
4f:48:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:13 2025 by rpki-client