Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: EkgCIl1rLKURhCF5jpNbNYTEObvdyew4HeFypWDoLps=
Subject key identifier: 8C:78:94:42:72:9D:B8:4A:B6:0E:09:E5:C9:3C:12:B6:2C:75:8F:AD
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 0197B77CD84F5C7B7F6378E82D49B60BB673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 1363
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: OxXvdKlhXWnfBJK1/ARv+SiX/02AbBsL/SZBu1GvVn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d8:4f:5c:7b:7f:63:78:e8:2d:49:b6:0b:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=8c789442729db84ab60e09e5c93c12b62c758fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:80:ba:b3:94:97:85:69:8d:48:59:0a:c1:
89:20:01:f4:69:96:5d:d7:a3:e3:02:ce:61:c2:5f:
12:8b:c5:24:c8:5e:af:c4:ff:6a:d8:c0:ce:1e:f5:
fd:a2:6d:91:db:76:52:4a:8d:14:29:c6:8a:c3:23:
38:f7:ec:72:e6:04:80:60:9b:6b:39:59:19:c5:d6:
5b:58:d6:19:a6:a9:8d:9c:48:42:84:04:a1:04:4b:
05:b8:3e:06:fa:c7:e0:00:0d:ca:8e:ce:c0:d2:08:
47:1e:6e:00:e0:14:ae:28:d5:63:0e:e6:04:c3:43:
2b:8f:12:07:ff:be:74:e2:bf:0e:1b:ce:59:27:1c:
34:45:6d:a5:67:bc:6d:b4:0e:58:29:1b:8b:da:ba:
66:5d:e6:6b:87:1e:e9:ad:64:60:47:1a:93:9b:27:
04:33:c8:01:33:43:79:42:d8:23:f9:00:1c:af:7a:
11:37:63:13:4f:d1:9a:0a:cd:f6:69:f1:07:4f:6b:
04:a8:8a:23:77:8b:c4:d8:08:b4:84:0b:7f:62:57:
3b:c9:d9:61:01:c2:60:60:9d:78:84:1b:54:2b:cf:
88:22:8a:4a:79:08:2c:5d:51:65:25:1f:ac:68:5b:
e2:57:4b:60:90:1d:5b:19:96:f1:d6:d4:02:36:44:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:94:42:72:9D:B8:4A:B6:0E:09:E5:C9:3C:12:B6:2C:75:8F:AD
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ba:06:6f:c4:2a:d8:df:78:2c:a0:ee:c1:39:ae:75:ff:62:
c1:ca:5a:ea:b3:7f:96:e4:66:a5:32:04:b8:7d:c8:d3:7b:30:
f7:d4:5e:74:1d:f6:91:1e:48:76:7d:26:52:40:54:18:70:df:
1c:ab:38:0e:74:9d:0c:fa:e5:a0:f7:28:79:9a:83:4d:ae:29:
12:62:7b:b3:90:aa:10:54:a1:32:44:e1:b6:76:4a:46:fb:ed:
09:c0:5c:c0:d2:50:23:c9:81:37:3b:68:3f:02:b1:1b:9d:aa:
26:3f:60:5b:06:87:37:0f:26:29:e0:48:d0:ce:72:14:55:02:
95:c9:c0:a2:d0:ef:d0:06:c2:0b:91:24:c4:f3:c4:31:34:24:
17:74:42:31:b3:90:68:0a:3c:a2:c8:ed:e0:7b:27:66:9b:1a:
8a:a7:15:14:52:5a:ee:b7:89:19:40:b0:51:e7:3c:a0:59:c8:
80:86:9d:1b:f7:b7:ec:6a:2e:39:06:95:b0:ab:c3:7b:49:c4:
da:25:61:ef:2f:9c:32:69:09:77:5f:89:4d:7d:27:a2:02:06:
5e:b3:d9:0c:94:4e:21:a5:16:02:48:47:cf:36:d9:02:e8:fc:
64:6b:75:21:08:dc:95:3f:1c:9e:71:d9:62:c9:d7:51:c6:70:
4f:54:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:39 2025 by rpki-client