Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: 6l9AWHrXKbUAIlWN42r4Yx6Xb7ajRbnX7XUDoWr3NuM=
Subject key identifier: 19:34:0A:B4:8C:7D:78:75:F1:B7:D8:98:FB:35:91:CD:6E:97:90:2F
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 0197C500E7D33C7C87C0EA16A58E6037C32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 043E
Signing time: Tue 01 Jul 2025 08:01:00 +0000
Manifest this update: Tue 01 Jul 2025 08:01:00 +0000
Manifest next update: Wed 02 Jul 2025 08:01:00 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: jVBs4y3WrNa50ruJpipPn3bWnVHOVhlvbsK2O+/LzjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:e7:d3:3c:7c:87:c0:ea:16:a5:8e:60:37:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Jul 1 08:01:00 2025 GMT
Not After : Jul 2 08:01:00 2025 GMT
Subject: CN=19340ab48c7d7875f1b7d898fb3591cd6e97902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:13:6d:4f:9e:0b:ce:d5:94:57:ae:33:ef:
ec:fd:a8:80:5d:4b:f9:bf:5e:f4:0e:82:fe:79:d7:
b6:20:55:01:a8:69:8a:2c:c4:e7:7b:35:70:dd:49:
5a:fb:c8:b6:c5:51:4e:cd:0d:5f:de:d5:63:a5:54:
07:31:68:1e:3b:ef:e8:6f:8c:6d:36:cc:45:8d:7f:
dd:7f:3a:11:29:9c:0a:16:d7:37:6a:0e:a7:5f:4e:
8d:f4:5c:e2:17:c4:60:4b:d8:fb:ca:b3:f6:97:ec:
5a:56:71:2e:10:e7:97:0e:8e:b7:aa:c3:46:a0:0b:
8c:86:60:fc:43:df:3c:d9:4b:ae:3e:99:36:92:6e:
92:0a:3f:7c:c1:f7:28:f4:79:ed:d8:9b:e3:92:8f:
75:6f:62:ed:22:be:f3:0e:05:d0:c9:2a:bb:f9:ae:
69:a9:5f:4c:95:78:e9:b5:c8:38:a1:7b:4a:1c:69:
b9:9a:83:3b:89:4e:6e:24:22:de:e7:fc:3d:86:f4:
91:a6:2b:52:85:32:9a:86:4e:9c:b1:8f:03:a5:52:
e1:93:1b:a6:5c:c9:dd:71:18:14:fe:37:54:0c:45:
4c:34:95:15:da:7c:94:ca:20:af:0c:a8:2f:af:d1:
b6:5d:95:ae:98:29:8d:5d:09:eb:9a:d2:fd:c7:73:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:0A:B4:8C:7D:78:75:F1:B7:D8:98:FB:35:91:CD:6E:97:90:2F
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:61:05:ee:88:fe:28:11:f9:c1:24:98:08:10:d8:10:f6:df:
8a:57:03:84:c2:3f:a7:40:a2:3c:45:71:31:77:1d:aa:b0:67:
87:b8:fe:b4:74:e4:91:13:3b:cc:e7:74:b4:ac:32:af:80:f7:
22:b5:4a:55:c0:42:eb:8b:f7:f4:2c:c5:67:02:22:36:6c:3d:
93:55:88:14:58:d7:3d:c1:36:77:b5:60:0a:1b:6c:aa:1f:7e:
9f:5f:22:26:a6:ae:5e:d6:b2:cc:b9:98:70:36:76:12:c6:0f:
12:0e:15:54:84:2e:50:95:cc:9c:88:8d:dd:f7:5a:e6:72:7b:
ef:20:2c:b8:db:d8:86:80:d9:bf:97:6a:79:88:df:64:85:d7:
21:c1:9c:60:84:ff:a1:26:d7:09:64:54:ca:1a:e0:0e:83:2a:
4d:91:95:b7:e6:40:47:f9:6f:64:0c:2a:26:31:16:e3:d1:e5:
87:41:9e:b9:b7:d8:a4:60:7b:ea:68:83:ae:0a:b2:a0:e2:e4:
d3:29:e9:c0:b1:e2:06:a1:f4:91:e9:5d:e0:64:ca:9d:c3:26:
55:19:40:2b:88:6e:85:fd:f9:a0:1c:cf:2b:36:2b:0e:07:2d:
cf:cd:be:0c:07:b7:d6:96:31:07:a4:63:10:8f:16:0c:f6:12:
09:60:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:41 2025 by rpki-client