Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: 7ZyAzfFx0/3kHzwE1uLx8Ve2N4EM7rELg4sQf7yVjNc=
Subject key identifier: 7C:F2:74:41:CE:51:DB:60:C4:34:BD:9F:27:94:76:A5:56:2D:56:FE
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 0197B745A68386795DA2A734030DE0F73CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: 026B
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: pfkh2QIV+rfHlsrAbanCes0YhgNY3Or8CAXB6T0wu30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a6:83:86:79:5d:a2:a7:34:03:0d:e0:f7:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=7cf27441ce51db60c434bd9f279476a5562d56fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:cf:06:52:5d:7f:4e:7d:93:46:46:78:33:
f7:64:93:b4:fa:11:29:b2:fc:59:6f:6a:ed:f9:e8:
00:19:1d:af:8c:55:6e:cd:e7:d5:1e:f1:61:b0:b6:
70:ac:72:4f:d2:35:ea:51:95:4e:a0:a6:ef:f6:5d:
be:d6:e1:b8:6c:83:4f:23:1f:1d:b1:ae:f5:17:52:
8e:29:69:06:99:7c:d1:cd:88:4b:f3:6e:36:23:43:
5d:55:d4:a4:23:97:f0:2c:85:b9:6b:57:ca:ad:95:
44:b2:8d:89:dd:12:ac:d8:2a:b2:22:c6:6e:f0:20:
1f:47:23:eb:75:58:32:99:02:34:5e:b3:e5:57:8b:
da:d0:54:51:71:2f:25:f2:bf:ed:ed:56:48:60:41:
7d:7a:f5:a7:a9:3f:1f:70:d2:e6:30:fc:32:93:54:
a3:88:4c:52:00:cf:a7:e2:c5:41:87:7d:71:e2:f2:
4d:6a:ff:4d:04:4a:98:bd:f4:21:21:be:65:16:c0:
df:87:c8:02:be:92:b3:da:a1:c4:ec:92:35:7a:68:
15:ea:31:4a:54:23:ee:ac:b0:60:fb:01:e4:82:b1:
bc:f8:26:83:d5:c1:af:d5:63:04:42:b5:f5:0a:b0:
6c:05:20:3a:d4:f4:37:52:2a:b7:c8:72:1e:1a:fe:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:74:41:CE:51:DB:60:C4:34:BD:9F:27:94:76:A5:56:2D:56:FE
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:4c:d3:4a:4f:58:de:fd:d6:b9:6b:9a:c6:ac:4d:c9:93:
a4:1d:16:89:7a:db:99:6e:c5:d4:98:6f:ab:42:34:11:6c:a3:
69:ba:95:af:8c:9c:0a:7f:85:70:4c:4f:36:d6:ef:d7:eb:9d:
73:0f:15:23:94:3c:1a:f5:07:8c:50:1d:77:bf:b5:e3:e5:fa:
fd:45:79:61:da:a2:9e:e0:4e:0c:2d:74:41:c6:e8:a1:67:95:
cf:2c:1c:0f:3a:55:3d:1b:3a:a4:62:28:0f:d3:fd:f7:04:41:
c7:66:39:02:8d:f3:ac:ed:40:94:4a:b9:01:9a:af:9e:77:dd:
22:69:29:43:17:29:16:27:54:5d:bd:96:64:fd:ed:0d:1e:d2:
35:fd:78:85:33:04:e3:15:ab:2b:b1:55:d5:91:5c:6c:b1:11:
18:b3:fa:e6:6c:0f:17:f0:93:01:d6:dd:ba:c5:55:a4:73:be:
66:66:80:48:a1:70:14:f4:a2:d4:25:0f:71:11:28:e4:82:a6:
b4:48:08:c1:da:80:e0:36:05:03:e0:5f:31:0a:56:77:e7:d2:
1d:f6:cd:20:98:25:dd:32:b5:ed:c6:49:ae:2d:fe:22:15:f0:
9f:a2:3a:e2:4c:81:a6:63:6d:df:70:3c:46:3f:7c:f3:6a:76:
45:4d:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:31 2025 by rpki-client