Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: 51CI+APJyX9XbFJ92tIjHgReGSluCMzGKc6IIyrvUlI=
Subject key identifier: FA:2D:1E:35:71:04:B3:D6:B8:3E:F3:57:A4:34:EC:9C:8B:5A:9B:19
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 0198D6980B9696AB7CFC943BF5303BADB0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 0477
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: lW9+dTu7MandwrWdix48czWdyoZBBoX5ky3Ofpd7fyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0b:96:96:ab:7c:fc:94:3b:f5:30:3b:ad:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=fa2d1e357104b3d6b83ef357a434ec9c8b5a9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:66:c6:14:8c:b0:9d:c1:57:87:27:2d:8f:
13:a9:66:c9:d3:b0:09:6a:06:a3:f2:bb:bf:db:1d:
96:00:4d:63:30:c0:04:7a:e8:4f:13:cf:94:67:41:
5b:fa:af:e9:2e:7d:d8:22:8c:f6:bd:d4:94:9c:10:
12:e6:59:b6:39:3f:6f:2e:2b:54:b7:bf:1a:40:66:
64:ed:4a:94:c6:17:d9:86:34:15:07:9f:6d:56:02:
cc:68:2a:a4:61:2d:22:2a:76:db:f6:cd:4e:8a:0b:
5a:9a:b0:04:7e:6d:fc:61:53:a4:ef:76:7b:40:94:
31:c6:5f:c8:24:7e:b4:aa:b1:17:07:d1:8a:df:d2:
5a:dc:1f:04:b3:8c:62:13:1d:1e:30:06:71:46:f1:
3e:12:7b:fc:6a:43:0b:43:7e:bc:0b:19:63:5e:d8:
6c:dc:59:69:f2:75:7e:e9:d6:82:de:64:6b:6b:30:
3e:1e:99:a9:e2:c2:dc:af:e3:f2:ac:bf:f3:fa:5e:
e4:50:30:7a:43:04:a6:33:33:50:c0:e4:47:0a:7f:
92:80:64:da:f8:3c:29:14:7c:17:92:94:5c:e5:4e:
a8:9a:2a:12:c3:e4:76:84:7a:10:09:ff:58:b4:e7:
2e:d0:57:28:66:7a:e3:38:56:40:4b:5b:46:ce:af:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2D:1E:35:71:04:B3:D6:B8:3E:F3:57:A4:34:EC:9C:8B:5A:9B:19
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:33:d6:33:42:cd:9a:b3:44:19:61:78:b7:17:5a:2d:dc:
19:bf:18:67:ce:f8:a3:3a:fb:42:db:42:e4:41:ab:a8:38:c6:
20:ae:d3:e4:a6:70:07:fd:51:33:94:e1:af:bd:73:8e:46:68:
18:12:41:95:22:a7:ef:df:d5:05:b9:a5:03:7f:9f:0d:59:93:
e9:fe:8c:d2:ca:27:a2:f3:15:3a:46:a0:17:35:72:a2:92:d0:
f8:d3:63:ee:fc:4d:a0:ae:db:17:0b:0a:07:d1:ab:a1:1d:44:
6a:66:8c:2e:11:8e:22:d0:88:83:92:fb:cd:f5:80:09:72:98:
f5:34:d6:f1:d2:3b:52:eb:0c:cb:3c:9e:bc:d6:12:ad:b3:af:
53:db:81:5c:ff:7c:92:bb:3b:a6:3a:c6:b0:7e:e6:34:06:44:
c5:b7:e2:39:75:42:0b:72:c4:14:27:d4:19:77:46:1d:e1:43:
f1:8f:2c:df:f5:21:05:15:4e:4d:f3:1e:80:a3:38:a7:ca:53:
c2:5e:82:47:0a:a6:e9:11:92:5e:49:cc:01:d2:6f:97:57:fb:
5c:a0:b8:65:11:71:a8:37:ea:89:70:58:08:d9:07:0f:7f:68:
36:76:07:4e:a6:08:ac:9c:a0:f3:b7:ca:f8:da:3b:b6:fe:74:
bf:df:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:14 2025 by rpki-client