Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: zTS7jIAwmw7dHpjQFX22GcPv4Zhr+hZTsJApIIPLaAY=
Subject key identifier: 99:BA:2F:E2:E8:ED:3D:69:98:C0:61:F5:0C:F0:BB:FD:B2:2F:09:CE
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 0197B77C91DBAAC1AFEAE519519CDA61F9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1357
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: wVrpw/kFtiEFAHDRtEqukQFfN72HtNFHsGQ45ejdsgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:91:db:aa:c1:af:ea:e5:19:51:9c:da:61:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=99ba2fe2e8ed3d6998c061f50cf0bbfdb22f09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:f6:18:be:a1:cc:b0:cb:16:14:36:98:c8:
65:4e:1b:5d:e0:40:8c:92:5e:aa:a7:89:22:60:c0:
83:e2:7d:e2:6f:9f:58:d5:99:e4:5c:0c:b2:0c:f4:
ad:c1:cb:cc:54:cb:2a:a3:0f:38:2c:95:da:f3:6a:
7e:05:06:53:e9:60:21:83:1a:3a:dc:bc:f3:91:ba:
30:ea:83:1c:0e:42:4c:d3:17:9d:7a:0a:a8:c5:23:
60:ea:e7:38:c2:9c:0b:f6:93:40:24:4d:9d:c8:d6:
c0:c8:69:03:08:a6:1f:31:2f:fc:fa:38:ba:25:7c:
0a:97:ff:f7:6c:38:b0:5d:d2:f5:3e:a3:a5:3b:e8:
ab:d5:a5:4d:3c:39:cd:41:31:b6:26:33:53:2d:8e:
f6:53:d6:92:30:fc:ad:68:66:7b:77:d6:05:86:cd:
b2:f5:38:95:fb:50:c8:07:9a:be:c2:92:c5:18:30:
6b:3b:84:bf:c4:50:63:d3:d8:53:e9:75:7e:a0:d6:
35:b7:5d:50:c1:e9:03:22:35:9b:a1:28:61:72:de:
1f:26:cd:f7:55:e5:11:cb:c5:a5:2b:09:07:12:d5:
29:34:a4:33:4d:c1:24:cd:d2:ba:78:f4:ba:1e:d0:
3d:1e:4b:b4:a3:59:ba:37:6b:11:85:cf:aa:3d:cd:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:2F:E2:E8:ED:3D:69:98:C0:61:F5:0C:F0:BB:FD:B2:2F:09:CE
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:65:5a:f6:44:1f:27:95:67:85:49:9f:d0:27:21:5d:40:33:
ca:f6:47:65:1a:46:30:c8:c1:73:c5:2e:2c:e9:a6:33:c2:72:
29:da:0c:07:1a:41:ea:e4:89:85:54:43:b8:4d:ec:03:bc:6b:
61:b4:a2:d2:61:09:07:b9:aa:ef:0b:68:0f:83:79:57:6a:dd:
4c:8e:33:2c:61:b2:d6:6b:93:a9:0a:b9:92:c2:f8:c0:f3:08:
14:bb:b8:2f:fe:f0:46:2e:ce:32:b9:c6:c8:22:22:55:44:3b:
2b:d2:b8:13:94:08:b7:d6:85:c2:ca:78:55:33:db:df:62:80:
12:a7:8f:6a:97:26:0c:8f:5f:cb:b6:6a:cf:5b:15:98:18:1c:
ac:32:38:b6:3b:63:4a:0c:5f:8d:93:cf:32:07:55:dd:05:44:
7a:05:82:9a:56:87:96:ae:d0:08:86:17:a0:31:63:b7:d7:6b:
a7:e9:f5:79:e8:bf:26:b5:d2:06:c3:57:2e:29:76:45:49:80:
8a:2c:46:8f:85:0a:ca:96:75:3d:f2:9d:a4:c5:1b:ff:f5:49:
b6:7a:16:55:e9:ad:d0:57:6f:d9:58:09:09:15:ca:07:17:b6:
91:a9:79:3e:58:8e:d8:bb:79:43:84:a9:8c:7f:23:12:c2:f3:
62:6b:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:52 2025 by rpki-client