Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: NrwgVM63x4KH2LpFUuK8hT0J6kfqnTG5uNLrV0//PFE=
Subject key identifier: 9B:17:10:82:CE:B7:21:04:6E:63:42:5C:DE:99:47:48:2D:9E:AD:DB
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 0198D54E406F8F31578E730B52DB08E42EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 13F7
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: bcDaSPgTnXSJEm/jS6Tj0itX+/ql8kK6RGBDIo7t/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:40:6f:8f:31:57:8e:73:0b:52:db:08:e4:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=9b171082ceb721046e63425cde9947482d9eaddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:e9:ac:91:d5:5c:55:bb:4c:2b:3e:a0:46:
ea:af:11:ed:e3:eb:8c:70:a2:17:c0:16:7b:68:bd:
8f:74:93:d8:0e:f1:c5:b7:20:d1:34:ba:c6:b5:79:
64:dd:5f:59:90:a9:8b:de:8e:ef:f0:1b:e0:d9:29:
5a:4e:24:c7:fc:8b:0b:a1:af:4c:64:f4:e8:37:61:
75:68:46:38:99:02:ce:5f:a9:5c:00:84:4b:c7:a0:
af:e8:48:37:c0:14:7a:a8:07:6b:66:48:a2:2d:dc:
99:7c:f9:d9:84:15:f7:c8:f7:6b:6c:df:61:e7:69:
fa:78:b5:42:39:20:24:ad:d8:5e:e6:3f:cf:1f:96:
3a:a3:a2:de:5e:86:63:2a:1e:6e:a0:32:49:10:73:
65:b5:ae:9f:9b:38:04:d2:99:31:d8:e0:4d:a2:58:
cd:3f:74:ea:a9:85:5c:b3:95:39:17:0a:61:ad:b0:
aa:81:e7:9a:dd:71:79:e4:ad:a3:a4:8a:8d:eb:e0:
fb:42:22:95:46:59:cf:5e:6f:15:ea:66:eb:8b:41:
7d:6b:89:b1:dd:de:42:3a:a8:2a:ad:79:61:4b:43:
25:cc:45:66:ed:a8:9a:fa:2b:2a:f4:31:4c:f4:e1:
5b:8a:01:9e:1e:5c:98:52:b9:b6:75:1b:f2:84:ab:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:10:82:CE:B7:21:04:6E:63:42:5C:DE:99:47:48:2D:9E:AD:DB
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d4:4c:c0:62:5f:ca:83:1f:00:f1:67:5b:68:e7:d8:a7:2f:
0a:2f:98:1f:f3:9d:8a:07:3a:78:09:60:9f:93:9c:50:6f:43:
5f:47:9e:51:cb:b0:75:85:64:e1:bb:dd:ad:7a:7d:6b:96:a1:
d9:52:68:fc:21:af:6e:11:03:28:10:47:30:a8:61:85:b7:5b:
11:97:12:59:80:db:9f:7e:f5:8f:5d:48:60:77:a9:5e:cd:5d:
bf:58:c0:c0:a7:2b:12:6b:c7:e7:f9:00:de:99:09:9d:71:fc:
4f:fa:25:2d:fe:6c:60:9f:da:2c:81:0f:17:d5:3a:2a:43:52:
c8:61:9a:75:a4:36:83:ed:c4:09:8a:b1:e9:ff:d2:e6:52:81:
fa:39:2e:6a:cf:12:9f:b8:9b:0b:26:1b:db:a5:dd:d2:4d:b2:
1a:58:c6:6d:21:2f:d9:50:05:f5:ea:18:fc:fc:56:b2:2e:a6:
81:76:e6:83:21:0f:7b:f6:ea:eb:eb:d2:b5:88:c1:7c:c2:e2:
6d:ed:33:80:51:36:f5:a6:4f:7e:37:58:79:db:4a:cc:b5:08:
45:07:f5:59:7b:80:7f:be:a8:19:c4:75:e3:72:3a:38:f5:e8:
4f:63:a0:ec:84:26:f6:ea:c0:f3:cd:be:cd:b3:b6:5e:42:1c:
ab:4b:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:12 2025 by rpki-client