Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: st1ff88ssYQr5TjLEnjamREuMzxNRgHgMLup0Y+A0TY=
Subject key identifier: 6B:DA:13:33:DC:51:50:0D:11:50:9D:E0:DE:4A:DD:E9:D5:80:2D:51
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 01976D3D85F31B82E81E19BD1267B7469B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0688
Signing time: Sat 14 Jun 2025 07:00:37 +0000
Manifest this update: Sat 14 Jun 2025 07:00:37 +0000
Manifest next update: Sun 15 Jun 2025 07:00:37 +0000
Files and hashes: 1: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: 179pakK674lrrbK/BqVYqbQTKMs6AGx5T0R/bjPNk6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:85:f3:1b:82:e8:1e:19:bd:12:67:b7:46:9b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jun 14 07:00:37 2025 GMT
Not After : Jun 15 07:00:37 2025 GMT
Subject: CN=6bda1333dc51500d11509de0de4adde9d5802d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:ed:22:6e:24:01:71:ea:5c:d8:1f:d5:87:
8b:81:d7:f2:e1:b0:2f:d4:15:37:0b:c3:8e:89:90:
e9:01:57:3a:42:11:6e:0c:61:6c:4b:e3:5f:7f:df:
2f:57:f0:e2:67:43:16:34:df:a7:83:8a:fd:f2:82:
81:47:24:e9:c5:f0:7f:7c:ee:ff:11:95:89:8d:9a:
7b:dc:e2:d4:a4:fc:9b:57:99:11:21:ee:d7:a0:85:
54:96:94:59:eb:bb:ee:00:4f:f8:6f:2b:1c:fc:ee:
b8:37:93:7d:ea:29:b0:c6:85:ca:e1:3b:a2:22:2b:
d9:7b:91:7b:7d:9d:90:85:e3:01:70:94:41:47:93:
c3:cb:3b:83:cb:4d:8d:9e:40:46:32:29:da:ee:4a:
f1:62:a5:87:4f:ab:ce:21:23:97:cc:99:05:36:bb:
5a:f2:1c:79:89:9d:6b:2d:5e:99:89:d9:a9:40:e4:
7b:b7:31:3a:66:db:da:75:a1:06:9a:b0:06:de:99:
cc:10:08:6c:47:e9:c5:36:d4:87:80:5a:99:bc:7d:
30:ef:78:93:8c:5c:44:81:27:b3:f0:e6:21:f6:6c:
38:71:6c:04:79:e3:1a:4f:5b:f0:e5:61:2a:25:fe:
42:1e:51:a9:e7:5a:6d:3a:9c:47:63:4e:bc:c6:3b:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:13:33:DC:51:50:0D:11:50:9D:E0:DE:4A:DD:E9:D5:80:2D:51
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:b9:27:83:93:44:65:27:89:cb:3b:9d:81:84:76:87:3d:
d0:6a:e5:3c:5b:d9:94:a6:26:38:c4:95:48:a9:e2:e5:24:33:
4e:21:44:4b:da:be:98:c1:9c:c3:78:84:e3:6d:7c:60:c7:75:
1e:88:c3:2f:c6:0d:ed:65:0b:c0:5f:8f:73:34:12:d5:84:a1:
a9:54:ea:46:c7:c7:4a:69:88:9c:ab:7d:be:09:e2:3f:d8:07:
42:0c:d0:08:05:53:c3:fd:f1:88:9c:12:0d:94:b9:6a:17:fa:
21:e3:5f:74:bd:a5:91:10:9f:b6:4e:4e:a2:9c:d9:9e:c3:bb:
b9:dd:e4:00:cf:1d:27:26:ca:3f:71:37:b2:af:d1:b3:cd:39:
67:8a:83:f2:ff:5b:9a:c1:0e:72:a5:a7:b6:df:aa:7d:69:40:
5d:4c:fa:c1:ba:b7:37:9c:09:73:7e:49:bf:3f:45:fb:19:0a:
08:7f:6b:e4:ee:1a:83:98:51:cc:42:5a:62:99:0c:63:a9:81:
16:54:5f:09:4a:eb:b5:2c:85:1b:26:a0:9b:ad:fe:89:a1:0c:
04:6c:fe:31:62:66:1e:5d:1a:51:c6:0f:03:e4:40:79:e7:32:
27:2e:0c:fe:8c:89:cd:eb:fd:ac:9e:71:c6:1b:5b:77:6a:32:
fd:c0:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:50 2025 by rpki-client