Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: rD7klnz1OWUcVwEv9pCHAy0kQMPmpZpoGPJr6FPpTls=
Subject key identifier: F2:85:14:AF:66:8C:F4:1A:A1:68:3E:98:54:97:E6:A5:F5:BC:DD:AB
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 0198868CB4490820A096BE31196235A28C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 15E4
Signing time: Thu 07 Aug 2025 22:00:24 +0000
Manifest this update: Thu 07 Aug 2025 22:00:24 +0000
Manifest next update: Fri 08 Aug 2025 22:00:24 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: FiuDRQ+GuDgRe3QWIad7TrBtQTN1EX4S008ALbTGQIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:b4:49:08:20:a0:96:be:31:19:62:35:a2:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Aug 7 22:00:24 2025 GMT
Not After : Aug 8 22:00:24 2025 GMT
Subject: CN=f28514af668cf41aa1683e985497e6a5f5bcddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:36:37:74:4b:b8:dd:4f:cc:0c:33:e9:a1:
9c:8e:18:eb:c2:5e:52:23:15:41:08:4e:96:54:41:
d3:fb:cf:0b:43:23:89:62:7f:85:58:fa:b9:29:e6:
74:f1:91:8a:1e:53:03:47:f0:e9:4d:a5:b8:03:e8:
0a:32:d6:61:8d:66:2f:84:48:52:fb:2a:7b:93:dc:
02:25:de:6f:0e:d7:f6:98:06:9f:65:8e:46:b0:13:
63:d4:18:07:e1:08:13:0f:17:ea:62:f2:c7:76:85:
ad:c2:d9:66:12:2c:2d:50:36:94:ba:fb:de:70:ac:
25:f1:b4:ea:25:d1:d1:f5:f8:7a:b5:88:e2:52:37:
37:b4:f8:4e:96:77:c3:38:65:c5:20:2c:30:4e:91:
af:cf:5f:ed:02:8b:42:12:01:a2:82:d4:a5:c7:6e:
5e:87:a4:5f:4e:b8:bd:da:97:91:1f:35:47:a8:48:
49:62:fa:04:92:6e:02:0d:1b:a4:41:50:51:fb:c4:
90:2b:34:06:40:00:96:d0:9a:b7:dd:07:b6:6f:69:
f5:fa:2a:59:a2:ff:f2:e4:23:bb:90:81:3e:da:ac:
54:e4:17:f6:cd:62:bb:d4:0b:73:6a:17:2f:c9:f6:
5c:98:14:ab:53:e0:2a:14:77:50:b0:24:16:d5:d6:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:14:AF:66:8C:F4:1A:A1:68:3E:98:54:97:E6:A5:F5:BC:DD:AB
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c9:1f:28:6b:17:09:b7:8c:c6:9e:9c:96:df:f0:b9:d1:1d:
b2:75:5a:0c:8e:b2:b6:5b:01:9d:fa:99:7c:bd:d4:e9:bb:3e:
fd:e8:2c:8a:87:f2:3c:80:f1:85:5e:f6:e5:34:52:63:de:5a:
74:10:13:2b:88:48:07:08:5e:80:4d:af:8e:f0:04:f3:50:26:
6f:36:e7:49:d2:3f:04:a9:84:07:e5:0e:04:e4:81:af:7d:44:
3a:98:39:63:d2:de:89:a1:eb:7a:fe:3e:d2:6e:bf:95:59:b1:
1a:78:05:f6:ec:08:6c:4f:13:36:19:aa:76:55:e8:4f:e8:8a:
42:f7:ca:ce:b9:4f:53:14:b0:2a:95:02:d6:42:97:d9:8b:8d:
d6:34:5d:02:d2:cf:cf:df:ef:ae:a0:36:02:8c:54:71:3d:a2:
a4:f8:d2:e0:e4:e1:99:32:e5:b3:b9:c3:88:07:80:9c:ef:fa:
49:39:61:47:40:45:a9:f8:e8:ba:42:42:80:ab:83:48:aa:93:
2d:66:54:53:18:de:1e:b3:72:58:16:80:00:34:a9:93:2b:b2:
64:8c:9b:05:1c:ad:51:b7:d1:16:d0:69:13:18:07:5a:58:7d:
ac:5a:12:93:1c:7d:f8:bc:a4:5b:9b:6a:02:cb:25:4f:d7:69:
b8:80:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:10 2025 by rpki-client