Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: UAtF2dQH8cJg7C8AsFSUZSP3bG07c+a84BSJanaK8tY=
Subject key identifier: DB:36:A1:58:2B:A0:C9:B1:18:0F:D3:BA:6E:00:48:FB:C9:3A:A6:61
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 0197B9337BD70D5035F28497D3D5BA95AB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 3F
Signing time: Sun 29 Jun 2025 01:00:48 +0000
Manifest this update: Sun 29 Jun 2025 01:00:48 +0000
Manifest next update: Mon 30 Jun 2025 01:00:48 +0000
Files and hashes: 1: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: 2tE/Sg4sAhm1Wbtv1G5Y8wHFLQCIyec2AcXbGHB5m+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:7b:d7:0d:50:35:f2:84:97:d3:d5:ba:95:ab:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jun 29 01:00:48 2025 GMT
Not After : Jun 30 01:00:48 2025 GMT
Subject: CN=db36a1582ba0c9b1180fd3ba6e0048fbc93aa661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:bb:4d:de:aa:a8:e7:a4:8a:af:7e:2c:50:
e1:a5:23:dc:05:33:54:75:a2:0e:3b:12:5b:72:71:
d6:09:c0:57:44:b9:ca:78:67:da:27:ef:a5:10:c5:
30:de:a4:8f:fb:cc:4c:66:a3:bb:da:08:31:b2:72:
27:cd:56:c4:78:1f:c1:fe:f0:19:bd:09:65:52:1e:
c6:ce:84:01:72:da:9d:a2:a9:20:7e:d5:61:29:67:
c3:e4:9a:55:b6:14:09:14:96:8c:9e:41:38:0e:88:
48:bb:f3:63:59:a9:51:7f:a3:5c:7c:eb:15:5f:fd:
0b:99:fb:7d:8a:98:5f:8c:be:72:d9:e4:f3:6c:c2:
50:e7:e0:25:26:70:9b:f8:dd:24:be:e7:ef:78:05:
0f:17:f3:d5:bd:81:60:e8:a0:55:51:06:18:37:78:
9e:2c:f5:05:52:2c:33:29:cb:2f:51:69:27:f7:d5:
26:21:fa:9d:18:fe:2c:4a:1b:6c:fc:67:8d:35:7c:
11:ce:2a:59:10:5f:17:b1:6d:df:d4:62:d4:c0:9f:
62:65:1f:6b:80:79:2b:db:cd:65:cc:24:d8:22:28:
63:69:dc:0b:86:0d:9d:b6:5e:d6:43:f0:a8:70:8f:
e7:52:da:d7:ed:02:91:06:9c:3e:80:5e:28:31:1f:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:A1:58:2B:A0:C9:B1:18:0F:D3:BA:6E:00:48:FB:C9:3A:A6:61
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b5:9b:00:e7:9c:9d:8e:75:8a:8e:83:6c:f2:51:78:e8:a3:
de:66:f6:60:e8:1f:55:79:b1:f3:fb:30:a4:08:d1:4a:e7:b6:
52:28:32:d3:b6:18:c9:f9:c5:d0:05:41:90:8e:8a:b4:9b:77:
92:34:af:8d:e8:7b:8b:78:28:6e:cf:0d:79:5f:e4:16:97:89:
74:ef:d3:2a:37:ea:41:12:12:34:2c:23:5a:9c:8c:76:28:74:
78:30:51:02:7c:01:41:54:3e:d8:45:8c:0b:33:57:82:5e:2a:
c5:40:0e:da:45:1e:ca:03:3a:d7:31:c4:d1:48:ad:13:d0:0f:
99:7c:61:cb:cb:e1:66:7e:3e:56:4d:3f:ab:d5:ba:16:90:3e:
3d:f5:e2:9f:49:76:18:25:7d:8c:6d:d0:42:21:dc:3d:42:e6:
be:ea:08:bc:21:18:d6:61:7a:bf:1d:0e:9b:d9:c8:60:74:83:
b5:8c:c3:3b:a6:91:bb:f7:9a:06:89:ff:43:9e:25:bc:4e:06:
7d:a8:44:59:7d:9b:d2:29:9c:03:d6:10:0a:81:cf:66:3b:da:
98:f7:87:aa:4f:2d:40:03:d6:c5:86:14:d1:0a:4b:a3:03:6a:
3c:26:8f:12:4f:e5:d6:3e:da:f5:84:e1:e5:eb:14:b0:9d:6d:
24:36:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:27:00 2025 by rpki-client