
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: vhixiySHfalA08NH4EmhL1VwjvpRKSz3Wz1X2crI5l4=
Subject key identifier: 13:2A:47:CB:55:8B:2F:42:3B:92:53:0C:BC:56:C0:08:D7:86:ED:84
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 01988166AFF8270C5FF6F8C9F7521EDFA499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 0345
Signing time: Wed 06 Aug 2025 22:00:47 +0000
Manifest this update: Wed 06 Aug 2025 22:00:47 +0000
Manifest next update: Thu 07 Aug 2025 22:00:47 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: BGBZNlkPv9q8ThnLoSoHKz0Ic+MTBD0UYzvTZwpOdE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:af:f8:27:0c:5f:f6:f8:c9:f7:52:1e:df:a4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Aug 6 22:00:47 2025 GMT
Not After : Aug 7 22:00:47 2025 GMT
Subject: CN=132a47cb558b2f423b92530cbc56c008d786ed84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:7b:c5:e8:76:73:c8:ab:66:2a:52:67:da:
3d:46:d9:5e:e8:40:b3:b6:6d:30:40:7d:27:36:10:
88:0e:95:67:13:3c:6d:63:ff:53:4a:46:10:1a:4a:
4a:76:00:03:e1:c7:74:74:3e:66:dc:0c:02:c2:14:
5b:4e:9b:73:bb:34:1a:47:af:e2:72:7c:7b:68:8d:
7e:d5:75:35:9f:fb:9e:1c:9c:41:3e:30:6a:6c:cc:
0a:45:36:0d:5d:5d:4f:ae:b6:0c:01:11:bb:56:23:
ab:9d:36:fc:59:dc:0d:d7:8a:34:4a:5b:7e:89:77:
16:d4:6a:06:fd:e2:4b:17:55:6f:bc:8f:6f:ec:f9:
45:f8:dc:bf:cf:91:b8:7a:31:aa:32:4c:e1:1e:4b:
ae:3f:78:43:36:97:5b:d8:96:38:cf:32:80:34:16:
07:cb:ae:c3:ce:f0:56:19:c0:ee:ed:42:5f:ea:9f:
6d:f5:07:02:36:6d:1b:d1:2d:b8:94:51:d2:41:de:
7f:3d:07:fb:2f:15:2c:d2:8f:64:43:0a:d4:39:4d:
b3:03:c4:ed:d4:63:0f:33:90:53:be:0a:19:a9:04:
a4:82:5a:d7:a1:1b:d2:89:aa:a9:ed:b0:5d:2e:1f:
ee:f9:32:85:e4:e2:be:ad:ae:90:54:1a:6f:d0:22:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:47:CB:55:8B:2F:42:3B:92:53:0C:BC:56:C0:08:D7:86:ED:84
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:07:88:8a:43:5f:e3:a9:db:22:83:be:95:b3:64:54:28:
72:2f:c3:03:c6:a4:29:87:0b:f5:88:fb:94:04:14:86:5f:65:
dc:3c:88:59:ec:a8:0a:76:70:aa:cc:22:b4:06:0b:ec:9c:d5:
b7:e9:84:87:e9:40:de:b5:a5:4b:dc:d9:8b:92:1e:3d:c0:b6:
9e:ba:ae:4a:4e:4b:fd:40:3a:01:87:fc:10:84:59:88:0a:63:
aa:93:b7:2b:dd:fd:6d:3c:c1:a9:74:60:43:a7:68:12:34:67:
81:0e:55:a5:8b:43:aa:01:5b:e2:b6:92:f8:96:bd:16:e8:81:
33:20:46:81:cb:cd:bc:7a:32:9d:1e:80:f4:a7:04:12:06:7d:
88:59:4a:74:71:34:c5:38:e6:f2:01:fd:f9:77:ed:b6:90:8c:
09:00:ab:74:e3:04:ca:7d:e9:d5:90:2c:72:9d:d7:9c:89:07:
3f:f8:b3:8e:45:c9:26:6c:d5:35:8b:00:c6:2a:b0:f4:c0:57:
73:53:7b:f6:76:96:92:d6:d1:f0:32:5d:68:23:4e:25:3d:73:
df:47:00:fd:d9:59:d1:dd:1c:c0:9c:39:05:ca:1d:f7:20:67:
56:13:1b:9c:15:d0:04:7e:96:59:51:46:eb:55:92:f7:5d:92:
2a:f0:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:51 2025 by rpki-client