Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: 4c4+9QwCqq7EROspTuIcxlhfQybr+nGOM4n0bU2haP8=
Subject key identifier: 65:FB:1E:5C:20:D7:42:59:B6:11:60:5A:EF:F3:44:71:16:05:B8:83
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0197B9D930A46191EED72BA214B5784CED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 0876
Signing time: Sun 29 Jun 2025 04:01:48 +0000
Manifest this update: Sun 29 Jun 2025 04:01:48 +0000
Manifest next update: Mon 30 Jun 2025 04:01:48 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: ollpi0TX5dv3f+Zyenb7wMTcT2nH427YKGpWbZPBRxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:30:a4:61:91:ee:d7:2b:a2:14:b5:78:4c:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Jun 29 04:01:48 2025 GMT
Not After : Jun 30 04:01:48 2025 GMT
Subject: CN=65fb1e5c20d74259b611605aeff344711605b883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:2a:eb:6a:9f:99:6f:13:a5:34:2b:22:c9:
7d:53:bc:35:41:f0:b1:c7:bb:0f:d8:5b:72:18:f3:
3f:41:ed:44:72:1e:2f:e8:f8:40:65:e7:c0:3e:25:
45:3c:58:c9:8b:c5:4f:c3:3e:2a:d1:dc:8e:28:76:
24:43:80:96:54:c8:14:96:39:e4:2d:b8:13:03:b4:
2a:0a:2a:c6:56:16:19:f1:38:eb:fb:bb:81:5a:be:
60:42:c1:89:4f:5a:a2:2c:e8:46:f7:2f:f9:77:d1:
82:ab:57:f6:e8:aa:6b:ac:89:fa:37:d1:c8:a7:39:
24:a5:08:74:a2:75:7e:0f:cf:85:10:9b:34:ff:ea:
18:f4:d2:27:9c:c0:d9:81:f9:81:f4:2e:ff:07:10:
de:91:90:5c:eb:79:b4:a0:7a:b9:5f:99:35:b3:f9:
74:11:01:d0:d0:3f:9b:9b:d4:7a:c8:12:75:b1:a2:
04:90:fc:d2:bd:74:a2:06:d3:2f:7f:87:76:30:9b:
fd:93:aa:ca:ee:e2:ad:9e:bb:df:17:a0:b5:82:ed:
e0:25:36:14:4f:0f:90:f4:57:da:9e:7d:1a:18:f8:
71:88:04:0d:e4:85:07:10:c0:41:0e:52:3b:6f:aa:
f6:1c:9b:0e:54:b8:75:f9:e2:c1:55:fd:ca:ca:c2:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:1E:5C:20:D7:42:59:B6:11:60:5A:EF:F3:44:71:16:05:B8:83
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:58:a9:d2:9f:15:1a:7b:56:a5:37:a6:ef:7a:41:86:2f:
e5:54:a4:e3:32:3c:30:1c:47:a1:d5:6a:0f:d9:33:7e:b7:89:
9d:0f:f3:8f:cb:34:2b:94:94:3f:51:1a:d0:d7:b6:26:56:de:
ef:8c:32:bf:12:e1:a7:45:40:97:21:0e:bd:44:cb:84:3f:d9:
d9:b8:44:6b:2c:28:52:8e:e0:b0:26:f9:2c:7c:88:8f:6c:49:
fd:e5:45:de:26:6b:38:cb:28:c8:2c:e7:8a:84:db:06:73:c1:
28:64:66:90:ad:90:2b:da:65:fa:42:9a:b2:a0:67:85:c9:99:
e3:1e:2e:0b:22:b0:a3:39:9a:a0:c4:f9:dd:93:35:d4:69:6e:
48:45:44:12:b8:f8:03:81:7f:07:3c:56:ef:85:46:5d:5d:c4:
8c:98:47:2e:31:95:46:00:56:62:e8:5b:bc:6a:e0:fa:fb:d5:
ce:aa:61:b4:e1:80:6a:50:0d:cc:22:a9:24:f4:e4:a6:f2:fc:
34:97:c2:0b:de:c0:51:d7:18:a4:3b:1e:c2:e5:7d:ed:b5:e3:
f9:96:f7:cd:d0:5f:85:ce:99:c3:ca:e3:fd:78:34:03:30:9a:
a7:8a:95:aa:f6:cb:a3:f9:89:a1:98:12:54:a5:de:a6:ae:f7:
73:b4:59:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:52 2025 by rpki-client