Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: KPr0cZbetg7q7ysJasl2m+QQitcQ8jrc4MXxl8m7Z1I=
Subject key identifier: 05:FD:5E:63:C4:B9:06:38:A2:B5:89:A2:96:0C:46:6B:89:38:C2:14
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 0197B6A15733F06DCDC794795128F365400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 12D2
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: GuHVjvcICEB0T1aoGmYJtLUYgM93h2VZS6A560XS3m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:57:33:f0:6d:cd:c7:94:79:51:28:f3:65:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=05fd5e63c4b90638a2b589a2960c466b8938c214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:ae:d9:6b:a5:e4:b2:e7:a0:9a:32:a4:bb:
ee:0c:a2:5a:85:35:d2:44:83:35:56:66:17:3c:5f:
20:7b:cb:9c:db:37:bb:51:1a:78:a5:48:10:50:5b:
3d:ef:ac:49:d1:2c:53:e3:5e:73:27:30:1e:98:60:
e4:85:b8:c8:30:b2:c0:40:e8:e5:59:ae:2e:3d:a6:
3f:bd:26:5e:aa:76:67:85:45:e9:86:9d:fc:6b:b9:
4d:df:1e:d2:02:c8:45:66:98:31:3b:26:06:19:63:
27:99:a2:aa:85:1a:c9:48:83:5b:97:5e:e5:0b:fe:
74:90:76:d5:b6:3c:d5:72:f8:80:31:76:ed:40:cc:
aa:d9:d8:db:0c:f2:0f:9a:23:13:a4:e8:35:ab:52:
4c:19:fc:14:08:c5:67:c2:0e:5a:04:f3:9b:53:5f:
27:ef:a8:13:af:cb:5f:8f:ff:63:97:2c:ad:06:cd:
2d:f4:ab:ae:9e:f1:37:c3:2d:5d:6f:6e:5b:da:01:
7f:2e:39:7c:1e:fd:c1:51:8d:48:83:da:17:66:82:
27:30:12:f4:ff:33:0f:42:a9:ca:00:36:5e:f5:0d:
e7:97:87:fd:fb:ba:04:87:7e:71:71:8e:c3:43:59:
9b:56:7b:b2:1d:d8:91:ab:f3:ec:2a:df:f8:c4:c4:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:5E:63:C4:B9:06:38:A2:B5:89:A2:96:0C:46:6B:89:38:C2:14
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:0f:c7:56:33:82:f6:36:af:aa:b5:fc:a7:ce:9c:8f:5a:
7e:c9:5f:8d:b2:36:09:39:2d:ba:c7:a1:e2:0e:1a:1e:6b:53:
43:f2:c6:82:d2:8b:b4:78:ac:0c:1a:fa:9d:3b:7a:10:46:3b:
19:f0:b5:cf:27:6c:b4:f9:89:55:cd:00:d4:e2:71:54:f2:68:
2f:1a:ac:88:49:d9:cd:09:09:d0:31:54:3e:29:f6:45:0b:18:
73:ce:60:e2:82:fe:e3:ec:ab:34:9b:05:32:44:fb:ba:6d:07:
a0:cb:c0:9b:83:c5:0f:5f:bf:e6:c6:79:5f:b3:f8:12:95:6f:
ff:97:6c:25:67:b5:5f:d5:ab:1d:3d:ca:3b:9c:76:bb:62:3e:
25:b6:37:2b:86:5b:22:4d:93:b1:76:44:d1:4e:c4:01:97:65:
c6:d0:c7:da:34:3b:c6:e1:cf:c3:f6:ab:99:f8:76:80:0a:18:
f4:29:c7:61:e7:39:0b:1e:6b:1a:98:c7:ed:8b:19:64:28:b7:
8a:18:56:7e:a7:87:a4:bf:45:28:b1:99:44:5c:e4:df:6d:7f:
8e:fa:ec:e6:29:fa:99:61:b1:e7:15:89:10:3d:54:d9:bd:e8:
da:ee:6f:81:d7:5a:66:b5:44:9f:1d:72:c4:4e:ad:69:7a:4a:
39:a5:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:29 2025 by rpki-client