Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: XrQ0vCpR6uy9WSNxf3iE6oyI7KiAA2/6M47KF1DxZwY=
Subject key identifier: E3:3A:93:CE:55:2E:9A:F0:80:04:7F:C5:36:51:07:0D:52:A4:3E:E0
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 0196BD80CCDF5681B5D0BD74C61974AF5CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 1251
Signing time: Sun 11 May 2025 04:00:56 +0000
Manifest this update: Sun 11 May 2025 04:00:56 +0000
Manifest next update: Mon 12 May 2025 04:00:56 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: 8iuqZ/Vz4Yo+wJfr2haTichN6lmvHSTsfir4v7wUSO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:cc:df:56:81:b5:d0:bd:74:c6:19:74:af:5c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: May 11 04:00:56 2025 GMT
Not After : May 12 04:00:56 2025 GMT
Subject: CN=e33a93ce552e9af080047fc53651070d52a43ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:c9:58:cb:0d:16:ea:a1:9e:ea:3c:7f:b1:
d6:29:58:61:07:fc:33:64:4a:f1:9f:48:0e:5f:52:
81:b4:06:28:61:dc:f8:09:59:08:9f:7d:15:bd:3f:
5c:a7:6d:36:75:d9:bd:37:6f:1d:5a:79:3b:ef:34:
7b:97:f2:08:a4:74:53:44:a8:06:85:36:c4:f8:43:
4a:5c:ac:9a:3a:6b:ca:c7:0c:ae:37:d1:21:b5:cd:
ec:e5:5d:10:9b:47:81:88:c8:28:96:6f:cf:06:4e:
11:2e:c9:18:40:40:60:ca:52:0b:8f:32:b6:9f:45:
af:45:22:1e:f3:73:a4:9c:3f:a7:e6:38:e2:1f:39:
59:d0:12:f6:fd:5a:82:1a:fb:66:97:56:cc:72:b9:
fe:ab:2b:1f:0c:b5:24:d9:32:58:e9:ef:af:68:da:
2f:b1:55:2e:4d:5a:23:8a:da:f5:3f:10:04:60:4c:
30:bc:e9:d7:ca:29:bb:40:bb:21:d5:79:43:3c:0a:
26:7f:41:6c:7a:10:41:69:70:c2:79:c8:7d:cf:9a:
7a:0a:04:93:77:94:d4:d9:22:44:51:48:2c:df:34:
23:a1:b4:8a:90:2c:b4:d4:cf:6e:9b:f7:47:6c:a2:
42:02:d8:fe:e3:52:a3:6d:23:4f:f6:89:69:99:5b:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:93:CE:55:2E:9A:F0:80:04:7F:C5:36:51:07:0D:52:A4:3E:E0
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:f6:98:fa:4d:60:8a:ff:4c:d9:6e:35:53:37:84:fc:fb:
96:00:3d:db:4b:33:11:c2:27:d5:83:b2:2b:7c:6f:eb:c6:1f:
c9:ab:7e:f4:a1:60:28:ad:ce:da:23:29:f7:6a:ef:bc:a6:1d:
ac:45:c4:fb:32:4c:9d:f8:1b:53:e2:08:f2:cb:b0:33:dc:5b:
30:9d:21:55:46:ca:ac:80:d4:db:5a:63:be:31:35:25:7a:fb:
65:8f:6b:4e:3f:cc:58:df:04:ed:e1:f3:93:80:78:2f:9c:71:
5b:cb:85:e1:28:9d:f4:ad:58:5f:a7:9e:b7:6b:0a:20:81:1c:
4d:54:b9:da:02:f2:11:70:b7:5a:72:de:fb:ee:83:58:df:48:
e5:9e:ce:c5:c3:45:dd:cb:f7:a3:6c:4a:60:43:c5:66:b7:e5:
28:62:bf:49:51:17:61:98:37:2f:6d:0c:48:9d:61:77:99:f4:
2e:90:b6:75:bb:50:8c:e1:ff:9e:e9:84:6c:63:32:e8:54:b5:
27:89:17:3e:3b:7f:f2:94:33:1a:df:36:64:a1:ef:23:19:c1:
46:d0:17:67:27:07:04:84:9b:8f:de:ad:dc:f6:f8:d2:8c:71:
d5:17:30:e3:f1:8e:77:72:9d:f5:99:e0:4c:78:b5:e8:ce:48:
63:27:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:28:57 2025 by rpki-client