Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: 7JpFrgApINqEc6IV6wM7AYJUyYD/129WrG+UyiFjv0M=
Subject key identifier: 95:75:FE:95:BC:C7:82:84:9E:7B:B6:E8:35:50:FA:32:43:B2:7F:C7
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 0198D515814CC0286B3B99FA42255B14D91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: 02FF
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: 5O427sUcnGYcLeUE0ey4Ft91f6hR3ijdQZorrPfsHbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:81:4c:c0:28:6b:3b:99:fa:42:25:5b:14:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=9575fe95bcc782849e7bb6e83550fa3243b27fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:85:e5:9c:76:e6:db:d6:43:e5:9e:de:cf:
65:60:71:f8:4c:3d:ad:02:b2:62:aa:b6:70:7c:9f:
6d:d6:4e:13:7e:ae:86:58:eb:41:f6:b1:18:da:c1:
b2:0a:62:fa:60:2a:cb:6f:ab:00:3f:39:d5:f8:0e:
1e:0b:10:96:f3:f7:f2:22:0d:b9:d0:d1:ae:cc:df:
21:07:1d:f4:6b:aa:7f:cb:dc:45:58:bb:70:92:18:
df:9b:13:f3:35:20:6a:93:7f:58:a4:fd:02:95:af:
58:ca:89:11:b1:5a:f0:ab:72:53:10:eb:10:c4:d6:
c0:0a:d9:a8:a3:77:ec:b6:20:b9:d6:69:33:a5:db:
85:35:c0:62:6b:62:16:8f:22:75:45:d6:08:b2:93:
11:6d:ad:99:2c:03:c7:f6:3f:29:9c:59:b1:95:6a:
0a:42:4a:ea:43:2a:b2:ad:0d:7c:78:7e:e8:44:0d:
d5:95:9b:cd:ac:90:b7:aa:3d:ae:61:9f:7e:bf:92:
17:b2:e8:b5:2e:97:f6:2b:6c:c8:57:d7:54:8d:d3:
f7:b5:e9:34:fd:9d:97:5b:7d:d9:6d:a1:69:9e:43:
16:98:fe:b6:fe:5e:e8:72:7a:36:66:23:89:5f:80:
d9:d7:5d:47:ce:8f:cd:9a:9b:a8:84:cd:88:bb:7f:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:FE:95:BC:C7:82:84:9E:7B:B6:E8:35:50:FA:32:43:B2:7F:C7
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:10:de:7d:d5:b6:65:0d:31:a4:0c:65:b1:31:0a:0e:74:
ef:d3:0c:ea:b6:ee:f0:6d:5f:31:3e:26:33:9b:e9:c9:33:08:
c2:94:b5:cb:a6:9e:ac:71:36:f1:67:c4:2c:fc:d5:9a:b6:bb:
b6:fa:a3:d2:ed:02:b0:c2:6d:bb:64:75:bc:22:14:70:1a:cd:
2b:dd:7e:92:dc:a4:ef:b5:55:c3:49:68:d8:b6:e6:81:5f:40:
59:a8:a6:38:94:b6:38:a4:b3:8c:3b:b1:07:3b:a1:c1:a2:06:
cc:c3:db:2d:22:3b:77:fb:e7:fe:3d:11:67:64:a6:25:97:51:
e5:eb:e8:40:9b:c7:98:0a:a3:e0:bc:4a:df:f8:8d:22:10:45:
8c:5f:81:ce:1d:18:6f:73:70:72:04:91:e5:ca:47:f1:17:f6:
71:58:f9:98:d0:13:07:76:fb:05:76:4e:3f:9d:b1:86:e5:d9:
44:28:0e:cb:d2:9c:3c:d9:e0:3a:2b:94:11:2c:da:23:7d:2e:
84:00:0d:91:b5:96:bf:72:74:c2:ac:9f:f5:3e:8f:79:18:af:
66:c5:22:01:1f:3a:11:f6:2c:40:49:90:95:21:93:56:02:15:
ad:70:83:fe:29:7b:1f:31:98:85:12:85:7f:6a:b8:01:f5:54:
2b:f3:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client