Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: V78TZfvYyaOlwdwtvfDJNeqSxtziQqQ/49r0lBXq+7A=
Subject key identifier: 2A:20:8D:F9:DA:65:63:1C:6A:82:E6:90:17:DF:CC:64:78:93:1A:93
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 0198D5835EF5CA74C6AABAB82AAB98654B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0B3E
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: 2v8G7wt1Q8xARzc063G3Bnjgj2w2jxWP0P8gkFL7emg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5e:f5:ca:74:c6:aa:ba:b8:2a:ab:98:65:4b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=2a208df9da65631c6a82e69017dfcc6478931a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:36:f9:63:3c:d3:70:e3:f4:42:3a:20:a1:
1c:19:f6:4b:af:31:2e:1d:e5:5b:1a:4a:1b:86:2c:
14:43:4d:d8:1a:b1:22:fc:64:53:6b:ce:da:36:fe:
2c:df:c3:7d:be:49:1b:79:17:1d:01:16:a6:e0:88:
5e:79:e6:28:de:d4:3c:68:af:27:ad:83:44:b9:5f:
c8:f0:99:dc:46:ab:2e:0d:f2:ed:f7:fc:b5:0a:6a:
56:a6:c3:56:e2:06:29:74:6a:7b:60:76:b0:61:ee:
15:a4:7c:ca:b0:e7:f4:18:ca:ae:01:0e:01:44:de:
f8:ac:e5:5a:03:59:a3:24:61:1c:60:34:e7:ac:54:
87:8b:af:1f:5c:53:51:76:7a:fd:b2:f7:7b:23:54:
2a:d9:31:5a:36:aa:f9:52:15:39:28:b3:71:cf:fc:
b5:89:14:f0:db:b6:3e:e2:c1:55:b6:72:7c:ef:48:
16:41:61:d1:b8:2b:0c:a5:9d:5e:21:9b:ad:88:2c:
ac:75:7b:f7:f2:34:a6:b5:a0:b1:1b:af:7d:2f:80:
4a:d8:b6:8f:85:9b:88:5e:19:78:58:0b:6c:f1:2b:
e9:b0:ce:4a:79:a7:5d:07:44:92:06:29:d3:0e:84:
44:75:1a:d2:02:48:a1:12:a3:50:ad:a1:a4:d0:81:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:8D:F9:DA:65:63:1C:6A:82:E6:90:17:DF:CC:64:78:93:1A:93
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:fa:31:3a:d8:2d:0f:92:e1:29:28:aa:c0:70:f7:03:db:
f0:5e:cc:45:b4:1f:e6:f1:dd:68:a3:80:4f:4a:f3:ae:65:47:
63:0e:a5:9b:6b:78:50:02:65:5a:ff:cd:f8:68:22:16:00:4d:
8a:35:2d:b6:5a:e4:0b:e6:19:cb:a8:23:b1:4e:6e:f7:35:a6:
51:b9:03:0e:36:d7:ee:f4:6c:71:35:73:34:3d:06:c2:c4:5e:
d6:09:c4:73:e7:40:74:2b:7e:7f:2b:17:7d:e2:15:a0:de:52:
29:f5:b7:07:57:34:a8:f9:e4:e3:78:a1:8c:44:d5:67:d1:94:
ed:17:9d:62:3e:25:9a:77:5f:6d:d3:08:60:c8:32:a5:39:90:
f5:5c:ca:17:2b:ed:fd:dc:c4:66:98:73:34:bb:a6:b3:e6:76:
c5:5a:3f:af:9f:01:d0:71:23:5c:08:bc:a4:ca:25:05:a1:f1:
c9:a0:29:f1:1a:9e:07:5f:b8:1d:74:6a:30:a2:66:23:63:a6:
d3:c2:c8:6f:88:df:d5:56:93:0d:95:72:af:32:89:3a:21:74:
08:3d:e1:85:c8:16:0c:ae:10:9e:ce:4f:6b:94:86:86:f6:55:
99:61:b8:ba:57:b4:a6:5d:32:2a:31:94:e8:e7:39:43:32:79:
e4:0e:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:37 2025 by rpki-client