Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: whuEDtKvxOzJRS0/xJayGBd7SSgM9u+3A1eof3escok=
Subject key identifier: 9C:FE:CF:4C:A7:D8:95:89:97:D6:51:E9:44:AD:6A:66:F2:7A:93:BD
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0198D5BBCD1A265356B83CE199FBE81E4971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1690
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: D5FLlh2mWEV78qsbAhkTD32C0ChQNTARrvjzv3N6OGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:1a:26:53:56:b8:3c:e1:99:fb:e8:1e:49:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=9cfecf4ca7d8958997d651e944ad6a66f27a93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:da:f3:c3:8e:ed:d5:ae:4f:2c:35:7d:f8:
9d:27:9b:c0:a5:88:c6:c9:5f:26:6d:30:d8:cc:c2:
d7:be:d0:a3:d0:93:a5:1c:c0:85:dd:c1:ae:98:09:
a3:3c:d9:e1:a9:a3:4f:13:2c:ef:81:18:7f:db:3a:
bf:d9:98:30:d6:bc:01:04:86:a3:9b:91:26:cc:4e:
4e:5c:88:00:7e:dd:6e:65:11:7f:b1:8e:9b:8d:5f:
5b:71:d1:2d:26:b5:fb:7d:c9:74:8e:1c:f3:00:93:
bc:ee:da:84:5b:35:45:23:45:1b:60:4f:4e:ef:4a:
17:21:c0:ed:4d:92:a8:33:f2:8f:6a:24:fb:e7:d3:
d8:8d:fe:35:8d:fe:2c:f6:bd:98:24:c4:72:19:4d:
52:75:c7:97:52:73:61:98:24:8c:c1:10:c4:dd:ab:
68:63:9e:0e:86:81:be:be:02:bf:c2:cb:b1:e4:dc:
96:71:1a:0c:0d:7d:43:0f:1d:e2:d2:aa:8d:6d:67:
c4:ea:09:5b:43:48:bf:85:f4:31:7d:55:8c:71:1c:
05:78:3f:4c:19:77:6f:28:5a:5d:94:9f:3f:ce:60:
41:06:b9:7c:0f:32:59:3c:29:bc:6b:c6:16:2b:1a:
c8:9f:d3:4e:4c:57:1a:82:a2:51:0b:33:5b:65:20:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:CF:4C:A7:D8:95:89:97:D6:51:E9:44:AD:6A:66:F2:7A:93:BD
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:fc:5c:f2:04:a4:1f:45:fb:dc:62:50:ff:e0:42:2c:e4:
c5:e5:c6:dd:4a:0b:e2:41:6a:10:70:37:00:e1:cd:55:b1:24:
18:db:de:91:6d:91:53:71:d1:39:53:79:a8:ba:94:f1:9c:8e:
96:6e:78:a0:90:a8:6c:86:df:a4:36:4c:4d:b4:4a:4f:4b:e7:
27:9e:c9:0e:83:a4:1e:00:ce:1f:24:b8:46:f9:89:8d:5d:12:
d5:47:f1:ba:82:97:af:c1:b6:da:23:36:3a:76:60:80:2d:a4:
f3:f9:e5:3a:a4:bc:8d:78:3a:69:32:08:df:19:af:6e:13:43:
e3:11:d6:3e:7d:f8:c6:e0:f3:3c:0f:af:e7:9f:61:50:1e:51:
3d:fe:7b:ae:c6:f9:72:78:2b:0a:df:78:68:9f:82:02:25:a2:
a2:69:71:90:84:56:94:65:96:05:fb:09:64:9f:39:51:2b:34:
a4:d8:ec:86:9c:30:8b:c4:e3:1b:33:f2:42:b3:37:31:a8:f9:
70:9e:39:03:3b:0a:74:c1:45:d6:f5:d9:81:0e:ac:20:e3:0e:
f2:de:46:dd:c2:c9:8a:25:48:b3:75:c2:5e:f0:74:c3:1b:42:
28:a0:56:f6:07:2b:7d:ee:79:54:32:58:32:4a:20:dd:d2:51:
7c:5e:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:20 2025 by rpki-client