Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: PwFTnK6bmfKODlDRNsunhwO6v5FpDxOi7pVa4zdtTO0=
Subject key identifier: AC:44:EA:1A:99:CF:67:57:DB:BF:A8:8F:0D:17:10:9F:39:8B:FB:17
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 0197B8FDAB6349427D8870F2A13584471C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 00:02:01 +0000
Manifest this update: Sun 29 Jun 2025 00:02:01 +0000
Manifest next update: Mon 30 Jun 2025 00:02:01 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: KJvG5OWpuhRvtJvH74kXZDyO98xULdcezU76yZPQRUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:ab:63:49:42:7d:88:70:f2:a1:35:84:47:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Jun 29 00:02:01 2025 GMT
Not After : Jun 30 00:02:01 2025 GMT
Subject: CN=ac44ea1a99cf6757dbbfa88f0d17109f398bfb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:f2:95:df:44:b9:b0:7b:e1:61:b7:b5:c5:
e8:96:e0:5e:09:20:bb:b8:82:c9:6e:17:71:e7:8e:
31:cc:d3:2a:1d:b6:63:f7:6b:15:79:f0:15:8d:b9:
1f:9f:5c:64:bc:ee:68:dd:83:e4:5b:cc:2a:9f:26:
c9:18:12:1b:f4:be:08:93:a6:b4:f2:8d:9a:e2:6d:
f8:e4:43:ee:68:b3:c3:6e:3c:21:01:89:8e:96:77:
9e:c7:36:c1:97:6e:5f:6d:f9:62:b8:4f:0b:64:75:
87:8b:b5:83:48:19:2c:19:6b:a4:ce:4a:64:e3:9b:
35:2b:5e:15:82:a4:b5:d8:ec:ec:83:11:63:c8:7b:
69:5a:0f:aa:ef:b3:c8:7c:b3:18:99:73:48:95:d7:
c9:0c:10:17:22:4a:01:68:f0:4b:d3:c6:7b:af:21:
52:10:d2:72:06:ff:0c:5a:87:79:93:97:8c:c9:3c:
48:9a:d3:a1:d7:a8:ea:24:6f:08:3f:03:ce:e4:bf:
0a:fe:90:e1:15:66:60:93:de:8a:3a:9d:d5:9d:b4:
64:a2:63:9a:b3:6c:bd:01:df:37:5e:97:6c:5c:b3:
3f:df:7a:fc:c4:3c:fc:8f:85:16:35:0f:24:36:06:
c7:7f:f1:9f:7c:e1:5e:55:2a:1d:17:e5:f5:33:5a:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:EA:1A:99:CF:67:57:DB:BF:A8:8F:0D:17:10:9F:39:8B:FB:17
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ae:fa:fb:66:28:ac:94:13:2f:13:a5:69:4d:ff:2e:6f:55:
ac:db:40:69:7a:33:8b:c1:68:0a:42:7b:01:78:d0:8c:36:08:
2d:02:97:a7:64:25:4d:31:90:0e:b1:42:60:c4:ee:5f:7c:35:
a1:88:2f:38:4d:5f:bc:b3:43:4d:90:bc:23:ba:e8:bf:8e:ea:
29:33:50:ad:9e:09:50:3e:f9:20:02:08:71:9b:65:e7:80:85:
be:17:66:0f:af:e4:7d:10:58:2a:02:ef:ed:65:9f:8e:a8:da:
f7:f9:51:0f:b8:3e:3e:04:77:a4:25:a7:09:22:fb:d1:91:5c:
70:31:a9:01:cc:af:d9:71:3c:70:bc:fb:9b:86:e2:5d:58:53:
5e:08:06:c1:f9:f5:3b:a6:73:d8:6b:b3:9f:99:b4:ba:81:e2:
14:e0:d4:7e:7a:4e:b5:df:0c:39:05:82:cb:2e:55:98:a2:27:
03:11:27:99:9f:63:39:11:35:10:08:11:80:28:95:72:c5:57:
ee:18:68:19:49:a5:37:e8:3f:0a:6f:b4:35:43:1b:05:fa:d7:
72:9c:21:e7:a2:fe:c8:3e:9c:48:12:99:97:48:17:3a:1b:86:
bd:a3:9d:13:1f:93:dd:19:2b:a4:a0:34:01:5e:92:b2:e7:7b:
96:a9:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:53:02 2025 by rpki-client