Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: z0HSsniclKgWekLgobGqdOAsMNVBwCZDd7U7OeTnqqU=
Subject key identifier: E9:76:9E:B8:A1:28:A3:64:D0:4D:1A:2A:7C:48:04:61:99:E4:65:28
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 0197B933C91F75C45C9A752BBCD4E2F14425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 1186
Signing time: Sun 29 Jun 2025 01:01:08 +0000
Manifest this update: Sun 29 Jun 2025 01:01:08 +0000
Manifest next update: Mon 30 Jun 2025 01:01:08 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: dykFAuyqvMTk/jVg/Dkt5WNby0jSrtdDXxbxI55aIuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c9:1f:75:c4:5c:9a:75:2b:bc:d4:e2:f1:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Jun 29 01:01:08 2025 GMT
Not After : Jun 30 01:01:08 2025 GMT
Subject: CN=e9769eb8a128a364d04d1a2a7c48046199e46528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:22:9d:a9:7c:73:e9:55:06:bb:fd:7b:f9:
e3:ae:57:ad:10:3f:61:3c:3e:e3:52:03:b1:8a:19:
67:7e:01:42:19:88:bc:88:ea:62:90:8f:5c:da:1a:
2b:c3:44:66:1e:47:7d:86:25:9d:3f:3d:2e:d8:24:
35:f1:82:5a:48:e4:77:dd:ca:1d:a7:da:3f:68:e4:
b9:2c:00:8e:24:1c:bd:91:02:25:58:bc:77:c4:da:
2b:5a:ae:e0:a6:ab:3b:28:bf:1f:cf:9d:ac:31:c9:
d2:bb:5e:fd:7d:fb:d3:59:28:fc:88:49:1f:31:22:
ab:90:03:4a:6c:b1:f6:7e:cd:10:dc:c1:dd:c9:af:
a5:87:dc:c4:9c:a6:93:05:f8:26:75:65:99:05:95:
01:01:01:23:49:5c:a9:ec:21:46:c5:a7:8c:84:e5:
e7:6b:ae:21:71:7a:e5:40:0e:84:96:9f:35:fe:26:
a4:04:64:b4:0b:fd:ac:fb:b8:f3:aa:fd:c4:d5:b0:
74:94:20:84:61:9f:18:f4:4e:e6:fb:c8:c8:dc:5d:
47:16:eb:80:4d:07:78:d5:5a:1e:22:fc:b1:08:dc:
37:4e:61:da:c3:ee:79:de:12:06:3e:ca:19:7f:72:
e0:5e:0e:f8:8f:6a:a2:4c:c7:94:f9:eb:2d:3b:4c:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:9E:B8:A1:28:A3:64:D0:4D:1A:2A:7C:48:04:61:99:E4:65:28
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:88:be:0b:83:13:c9:a3:4f:b2:d0:bf:20:a9:8c:94:81:
4c:17:7a:f1:69:9f:1c:2a:99:c4:41:b1:76:ca:2b:c7:61:f3:
a0:d8:11:82:e2:b1:f9:c3:9c:84:2a:0e:38:72:e9:82:d8:26:
01:39:52:b9:e0:da:2d:6e:ab:4f:c6:a6:7a:29:6c:f9:08:be:
3a:f1:d3:54:0c:78:67:f1:36:9c:4e:43:95:01:a9:45:79:d3:
5a:f4:07:82:6b:4f:96:f5:1b:54:65:de:30:b3:0a:94:14:96:
6c:8c:d4:18:af:cc:d3:7d:50:56:f8:25:f1:f1:4e:f8:84:9e:
72:30:5a:29:33:18:fe:c3:36:3a:98:ea:cc:50:16:95:d5:aa:
60:9f:44:82:d6:e9:f0:9d:de:38:fb:e3:70:fb:58:ff:0a:06:
c4:57:56:32:a0:4c:eb:f2:ce:26:0e:13:74:9e:31:68:95:30:
13:7d:0c:ba:63:4f:c7:7d:fa:d8:ef:e3:be:1b:1b:83:44:7b:
95:db:f9:a3:9b:75:8e:e9:88:d6:a8:49:6e:4a:e5:2a:ad:52:
c1:8e:8b:b7:3e:e2:80:95:d9:aa:a6:95:d6:a1:bc:c9:65:b4:
a8:b3:a4:be:67:a8:17:9c:b9:20:83:6a:0a:88:db:1d:c6:8f:
45:18:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:39 2025 by rpki-client