Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: 70nb9PuC4iXMCbox6DbffciQvKcmmkamgqzMWucBMYA=
Subject key identifier: 20:67:88:75:8D:59:6E:66:A0:97:8B:51:BB:7D:CA:38:C3:45:42:D3
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0197B88FF22D2057CA7D4381EE4FB0031A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 0442
Signing time: Sat 28 Jun 2025 22:02:10 +0000
Manifest this update: Sat 28 Jun 2025 22:02:10 +0000
Manifest next update: Sun 29 Jun 2025 22:02:10 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: EeVG/n117tsOsR0syffhu7OsNDriVKTVhOW6+tY5n4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f2:2d:20:57:ca:7d:43:81:ee:4f:b0:03:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Jun 28 22:02:10 2025 GMT
Not After : Jun 29 22:02:10 2025 GMT
Subject: CN=206788758d596e66a0978b51bb7dca38c34542d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:2f:47:15:16:11:98:62:7b:d9:a1:1c:d7:
43:7e:9e:84:7e:3f:f9:6a:4b:39:f4:21:eb:04:0d:
e2:e0:a0:5d:0d:ba:c6:d6:98:7c:91:c3:aa:c4:19:
12:e9:1a:3d:3f:44:44:43:92:eb:10:d5:46:0c:72:
d0:b7:6d:5f:2d:67:a5:10:ff:86:21:82:44:a2:9f:
4f:62:17:a5:21:ee:3e:01:93:3a:78:23:d3:e1:d5:
e2:b1:b8:82:a9:90:fe:72:41:d3:77:71:82:18:c6:
eb:57:6c:22:da:4f:5a:f4:72:01:a4:0b:05:2e:b4:
f8:4f:d5:41:e2:71:37:c8:30:f4:98:cb:0b:85:34:
e8:b5:19:bf:95:89:35:af:3e:50:8d:21:b9:60:52:
a7:f6:aa:0a:23:b8:21:74:fd:63:5d:49:52:1c:3b:
e6:15:7b:d3:c8:ce:ed:47:ff:d5:30:71:e6:c4:15:
de:ec:16:c3:ac:7e:e8:85:c5:55:5b:1b:17:25:31:
81:bb:0b:6e:22:05:40:1a:4e:9c:c8:6b:d3:82:6d:
61:d9:14:b1:85:4f:91:0e:9f:ad:16:91:ba:71:3b:
c9:6f:20:8d:6a:f5:4d:3d:72:3d:c9:81:2a:cd:cb:
e0:08:12:b2:68:15:84:75:05:50:4d:c9:72:9f:c0:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:88:75:8D:59:6E:66:A0:97:8B:51:BB:7D:CA:38:C3:45:42:D3
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a5:db:bf:e9:ec:02:ad:35:7a:1b:1e:aa:e1:36:84:a9:07:
50:7c:9f:86:87:27:93:70:c9:d2:d5:6f:d3:81:af:a9:bb:e2:
fc:17:4d:b7:e8:6e:bb:18:a9:ab:87:18:75:c1:39:69:5e:d9:
3b:b7:4f:95:f0:59:48:b5:06:7d:c2:21:ff:4d:4e:49:32:15:
16:73:1c:99:f8:1e:c2:16:15:82:7f:57:cb:45:1b:7a:cc:67:
02:ef:4b:bb:f4:99:0c:90:a3:28:56:0f:85:97:5f:48:dc:6c:
6c:6f:f3:71:e5:06:07:08:e2:8e:f1:da:74:ca:89:97:ee:2c:
76:6e:30:2e:1d:ea:19:f1:89:ad:ba:a7:53:c7:cc:a8:e4:1f:
bb:6b:4d:7a:09:63:02:ab:42:cb:20:ff:b6:c0:0c:c4:e6:07:
0a:5f:e0:91:1d:11:03:61:1b:b6:b2:5c:70:65:20:0c:c7:af:
20:3d:f9:d3:4e:57:59:78:92:11:46:ae:07:01:f2:50:db:31:
ca:60:5c:6f:62:36:d0:a7:02:ad:10:e8:60:03:7a:c3:54:dd:
40:18:34:e6:84:d3:04:55:f4:ae:b5:8e:bf:ef:c3:e5:66:23:
08:a2:7e:8e:fc:86:b9:bf:ff:eb:a0:98:57:2a:68:43:73:d1:
83:a2:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:13 2025 by rpki-client