Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: W2v8EW3yIYS6MtAkQB7ZAXU90CDy1bCWu6D8471VbNQ=
Subject key identifier: BB:9C:9B:36:0A:1C:13:F3:3E:49:CD:35:DE:56:53:A9:CC:68:76:EE
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 0198D47271B68C3DA3E931F42C6637AC7841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 1349
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: L9KqTFs0RaY3BVky51vyROUazVrqTu20QGmLJt+iOWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:71:b6:8c:3d:a3:e9:31:f4:2c:66:37:ac:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=bb9c9b360a1c13f33e49cd35de5653a9cc6876ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:17:95:af:8c:cf:59:f7:5b:ed:88:4b:d5:86:
be:fa:35:f2:67:2b:0a:c7:5f:22:5c:8e:30:be:40:
ab:b3:1c:5a:c2:c9:23:3b:19:46:3c:3e:88:d3:89:
0a:24:eb:ed:b6:7d:88:60:d1:d4:31:b6:78:d5:49:
84:af:5a:4e:87:44:f8:c0:30:a7:18:43:40:59:be:
75:38:b8:e1:d8:75:31:03:92:e8:6c:02:d0:dc:0e:
49:13:de:02:d4:9c:fb:ce:cc:ad:85:6e:20:bd:6f:
ae:fc:10:e1:66:ba:22:2f:67:ed:38:86:64:fa:12:
11:04:1e:ea:97:a0:11:d1:5d:96:7b:7b:73:ff:ab:
1f:9e:1b:5d:17:c4:5b:b1:e2:5c:7d:f5:a3:6d:f3:
05:f0:67:c2:2f:7a:06:71:95:a2:ec:29:4f:f8:52:
5b:89:29:9f:cb:e6:fd:46:f4:60:43:c8:19:47:0d:
c7:b9:91:a8:e3:fb:a0:c8:c6:84:36:a2:ec:0c:1d:
46:86:66:30:98:01:98:c9:6d:cc:8a:0f:51:f4:bb:
17:53:38:06:31:2c:d3:67:25:37:b1:4c:95:90:f7:
bd:94:aa:90:0f:12:89:32:81:be:71:b1:13:e3:70:
44:61:ca:b9:19:b6:d6:00:16:35:11:ba:08:a1:4a:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:9B:36:0A:1C:13:F3:3E:49:CD:35:DE:56:53:A9:CC:68:76:EE
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:8b:52:a8:8d:eb:f7:89:6b:7a:6d:a7:b7:17:65:4a:5f:
25:e6:2b:3e:db:62:10:05:65:5e:5d:ce:2b:41:ac:0c:30:a9:
03:c5:91:a6:76:33:87:d7:45:cd:ef:49:62:9a:ac:30:01:81:
86:5f:00:65:3e:32:a0:65:2b:c8:12:83:fb:5f:38:32:cd:ab:
c9:df:8f:52:00:e0:ad:e8:51:ba:85:b3:ba:08:45:d6:46:54:
43:66:64:ad:ce:8c:53:1b:c6:60:59:c0:d5:97:19:ae:6c:48:
ac:b9:6e:fa:c2:ec:b4:50:48:6d:8a:c9:39:5c:e5:21:2b:ec:
04:2f:e7:f2:5d:77:49:77:c7:3d:2f:2b:24:bb:e9:84:ba:57:
be:f3:50:a2:7e:f4:20:35:5e:cc:f6:bc:82:09:da:c2:2f:bf:
2b:85:d8:94:22:91:4f:11:fb:7f:5b:58:91:45:c7:f4:5b:7c:
a6:85:ab:17:cf:2c:d1:57:dd:f6:c2:1c:66:7b:09:a0:68:1f:
d6:61:50:7f:9d:5a:34:51:bf:3b:9d:c8:34:af:02:fd:6c:3e:
2b:a4:19:83:30:9c:53:9a:37:e7:51:ac:6e:e9:fc:0e:d4:b6:
36:7d:08:27:31:aa:5d:ce:bc:16:ae:04:3c:26:2a:c7:69:0b:
10:4b:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:52 2025 by rpki-client