Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: cB0maOG3pp8zxl65zhlsckndWQY12/xlOrUNtLYnRDs=
Subject key identifier: F6:15:40:AA:41:C7:4A:60:03:D5:09:9F:C0:1C:FB:FE:0F:C1:8B:A2
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 0197782EF357DE7911F00D08E99DF37E4F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 1558
Signing time: Mon 16 Jun 2025 10:00:32 +0000
Manifest this update: Mon 16 Jun 2025 10:00:32 +0000
Manifest next update: Tue 17 Jun 2025 10:00:32 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: KRrt6VSm0OrXqggUmHl0haLBD06Q2jbx/cW1VE1pHgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:f3:57:de:79:11:f0:0d:08:e9:9d:f3:7e:4f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Jun 16 10:00:32 2025 GMT
Not After : Jun 17 10:00:32 2025 GMT
Subject: CN=f61540aa41c74a6003d5099fc01cfbfe0fc18ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:ff:07:4d:a9:9a:dc:b3:30:04:3c:ff:ca:
9a:77:8f:7e:b2:4a:f6:95:d0:e7:57:fe:bf:18:7c:
ec:2c:5a:58:ad:86:ea:a1:c9:0a:5e:7a:82:61:e4:
73:0a:1f:0e:b2:18:aa:ab:0e:81:8a:0f:3b:9f:f8:
72:dd:e8:22:0d:c0:bc:6f:74:03:4a:6a:5a:b8:37:
c2:b9:5f:fa:c6:f4:b0:13:27:2b:c2:66:b5:ca:bc:
45:db:40:87:3e:b6:c5:fe:07:02:0e:ae:32:cc:35:
02:ab:5f:99:d1:cf:95:e2:41:7f:09:72:d0:5a:ff:
41:0b:8c:61:2a:5c:82:0d:0d:4d:5f:6e:81:2d:50:
8f:88:e1:e5:64:17:05:2e:ed:5d:e5:81:1f:2c:4b:
71:46:7f:cf:d8:0d:c7:fa:5a:86:28:b7:f3:ad:b6:
42:4b:7d:22:57:58:8a:74:4c:3c:4d:95:4d:5d:88:
b8:74:b4:c0:56:19:80:30:bf:d6:c5:e2:1f:a8:a0:
00:ac:57:3f:83:0f:89:ef:09:4c:0a:f3:52:bb:bd:
8c:44:7c:cf:5a:de:e5:4e:a1:e1:f2:b2:d3:01:e3:
31:19:d9:27:96:49:dd:8c:06:55:f5:af:ab:7c:19:
89:73:fb:79:91:31:62:5f:b1:29:99:54:b2:48:41:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:40:AA:41:C7:4A:60:03:D5:09:9F:C0:1C:FB:FE:0F:C1:8B:A2
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:34:a6:41:20:da:fc:a2:bb:50:65:9e:99:a0:4c:fa:fc:94:
97:88:d7:82:7d:49:7a:e2:cf:14:9b:75:88:78:52:7c:d9:97:
33:da:17:5f:2d:c4:95:2b:f4:d2:ef:d9:80:6a:a5:14:81:eb:
fb:67:28:01:71:5b:59:33:93:69:11:27:95:20:42:58:78:2b:
4d:79:35:8a:e7:90:b1:e6:87:c6:dc:ca:d3:d1:54:ce:43:d6:
d0:51:2c:47:fa:c2:3e:44:a2:94:92:d7:c4:4e:29:c2:07:87:
88:fa:e2:ca:98:98:44:ee:05:02:2a:08:b7:11:36:4b:d1:99:
bd:60:03:57:d4:82:b8:db:49:3d:f9:56:ff:4c:f7:0d:a0:92:
1b:cd:ce:a2:f7:c7:73:53:a3:59:e8:20:26:fe:5b:5a:d9:1f:
a2:ca:8b:41:ce:15:7f:0b:a2:cb:2b:2a:fb:f7:c7:ff:c6:e1:
3c:ca:8e:82:ff:fa:be:52:5a:c9:e8:90:e6:f5:94:82:cf:d3:
0b:a3:30:df:d2:f1:2d:e5:3c:58:dd:a2:cf:fa:6a:98:6f:d3:
8c:a6:2d:62:3f:98:f3:e5:b0:68:43:fe:f3:07:75:b6:4d:1c:
71:08:0b:f2:ee:ea:07:9b:41:52:e4:b0:49:e7:bd:8c:40:13:
a6:78:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:51:26 2025 by rpki-client