Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: cISWsPlgsuttI+QB/flmTgLPbsEVkr4PSNFFeWXteTU=
Subject key identifier: 63:A9:63:D8:E3:01:8D:52:C8:B0:43:7D:70:8A:1C:BF:7A:E8:D4:96
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0198D5BBBADFB955A7F440E99136798D2644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 0909
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: 0byiPgfnwmgtAolFRDbH+xg6/2DQkR3NaUCxYYJcxP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:df:b9:55:a7:f4:40:e9:91:36:79:8d:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=63a963d8e3018d52c8b0437d708a1cbf7ae8d496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:c3:27:04:d2:be:fd:f0:39:28:1d:ac:08:
7d:f1:01:89:21:c2:bc:df:47:4b:64:f4:c0:ce:7a:
5f:7d:57:c0:2a:72:56:10:8f:8e:8c:e3:14:cc:5f:
76:9b:b3:f8:5b:73:ea:75:bf:98:31:fe:56:4e:ec:
10:d4:6e:ca:19:da:fc:dd:7e:54:68:b5:53:0a:59:
7f:8b:01:e6:a1:41:1a:de:1d:5b:01:5c:e1:a9:e3:
46:b4:8e:04:1d:6c:cf:5d:e0:40:18:1e:7d:ef:d3:
3a:a2:70:0d:ac:c0:ba:16:cf:f6:7c:67:de:6c:6b:
7e:5d:72:87:99:ad:07:2f:6e:4f:43:8c:7c:73:62:
f5:0f:c3:b8:54:a8:ab:e9:95:8a:05:36:f1:2b:94:
46:d7:9c:7d:4c:3b:3d:03:10:8d:e2:60:5f:4a:16:
85:3a:a9:7f:05:94:61:3d:d2:9a:d9:21:1f:33:a7:
71:8e:64:29:a3:57:c0:f0:94:5e:a1:3c:d8:e7:ca:
ba:f6:da:53:85:01:8c:a6:6b:0e:76:a0:bc:de:3d:
a0:9a:8d:44:f5:cc:50:7b:33:e0:86:2c:9b:86:db:
1d:9d:60:89:ba:c7:79:80:11:a3:d2:69:2b:cd:1d:
40:63:e5:38:5a:e2:6c:58:9a:86:db:49:17:b4:bf:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:63:D8:E3:01:8D:52:C8:B0:43:7D:70:8A:1C:BF:7A:E8:D4:96
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b1:37:75:d0:27:22:e4:c0:31:f7:03:c7:27:22:d3:2e:86:
9c:c9:7f:18:29:40:8c:56:87:81:7b:39:e2:37:f6:8e:18:b5:
60:a2:46:d0:5b:6d:4c:aa:d4:11:46:71:16:20:72:21:af:1c:
b6:0f:24:0e:c8:a4:e3:9e:6e:20:89:b6:ae:2e:7f:3a:39:7b:
91:66:54:22:0c:d0:9f:03:9b:e8:b8:35:d9:c2:17:30:89:6c:
49:46:da:8d:8d:6e:a9:9c:ff:8d:c3:83:2f:39:d8:a8:99:26:
ae:d1:1f:3d:94:28:8c:51:e4:31:fa:40:34:61:d8:49:8f:06:
f1:7e:4e:88:5b:c1:21:30:68:15:35:3f:6b:92:63:03:83:ea:
b7:2b:e8:9e:4c:22:0a:55:11:b9:f9:fd:22:d3:ec:7b:43:f3:
3f:59:1a:a8:a8:14:cb:3e:7a:b6:4a:5b:b6:8d:22:0f:5b:93:
8c:cc:ad:b2:48:ac:aa:38:3f:a1:88:9d:f5:5f:4b:ce:2d:02:
ee:fb:00:4c:89:c7:3c:aa:3f:8d:6c:5e:4a:40:41:80:0e:6d:
26:af:6d:b8:67:78:f3:e4:03:d3:37:8a:83:4d:f6:2f:b9:c9:
14:d4:88:c1:1b:1c:23:2d:38:fe:ad:a0:c6:43:3c:d3:4c:c7:
64:6b:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:11 2025 by rpki-client