Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: KsZSWgHXo/wYaD4BwfqmA2TG68Ogerk5Bw6xk5mvDRk=
Subject key identifier: 83:CD:EC:E9:C5:70:63:80:E2:10:AA:6B:67:02:CC:53:34:F5:32:7B
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 0197B7B360C9C745273DC9AFDDADFA24A22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0537
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: 9Rya1iiz9XYGWHupuiTeqEpknVYWnRFDEG29756P48U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:60:c9:c7:45:27:3d:c9:af:dd:ad:fa:24:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=83cdece9c5706380e210aa6b6702cc5334f5327b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:72:7c:80:aa:b0:1e:f8:ab:e5:5d:27:81:
7b:d1:4c:0a:37:e6:ce:b9:fe:c0:e0:02:92:33:23:
02:64:87:46:88:fb:3c:06:88:0c:52:44:3c:75:8a:
fa:c2:1b:42:6e:eb:7a:87:de:a3:8e:6e:94:0c:15:
80:ef:17:5b:2e:f4:a7:3e:b5:1b:21:3d:54:11:ce:
9f:74:58:74:86:b0:79:45:98:bc:45:b3:76:7a:db:
19:c8:6c:d9:8c:81:00:1a:7a:50:c8:9d:f9:0b:e5:
6a:d1:a3:31:6c:94:6f:9c:ba:b5:ea:52:35:4e:01:
6a:06:fa:c7:ab:51:b0:ab:3a:c4:cf:72:16:39:44:
cf:26:1e:f3:75:83:df:9d:fd:7b:2a:6a:af:3d:c5:
36:6f:03:a7:ec:88:4e:21:81:2d:45:e0:cf:6c:9e:
7f:4f:e8:15:40:1d:f3:f2:85:e0:67:d1:8f:41:dc:
e4:ff:ac:0e:1f:5a:33:59:8f:7e:1e:ea:77:3d:a1:
9a:77:b1:13:34:f3:d1:1e:88:c8:65:e1:42:a9:f8:
39:61:4f:f5:e1:24:aa:85:5f:ef:de:c9:97:82:8e:
87:86:f3:a2:ce:c7:69:dd:fb:75:49:92:97:c3:fc:
35:2b:17:cb:8f:9c:f6:67:a3:fb:44:a6:62:5a:13:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:EC:E9:C5:70:63:80:E2:10:AA:6B:67:02:CC:53:34:F5:32:7B
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:7c:34:be:7f:ea:1a:07:e7:10:b1:7f:9a:e7:7e:f5:4b:
77:3e:16:aa:9e:37:7f:48:24:28:47:88:24:90:08:20:9a:ca:
2f:97:0f:49:ea:cd:5d:35:44:5a:16:47:71:45:ea:bc:d1:ff:
61:eb:ee:3e:aa:33:67:4b:b4:0a:bb:57:c1:5d:00:9c:04:81:
4e:1e:d4:1a:39:50:90:b0:d4:5f:3d:0d:66:62:8b:6e:ef:91:
79:04:80:84:9b:31:87:3e:69:6a:49:d3:f0:46:b7:ed:5f:de:
4b:7f:66:54:d0:cb:76:c0:be:c4:b9:7c:e2:e0:47:a2:b1:47:
d6:37:08:52:3f:3a:23:7d:63:5c:85:51:43:c7:19:2d:7d:9d:
58:fc:84:31:c3:f1:e9:5c:9c:af:10:9c:fe:ba:e5:18:ef:22:
30:31:a1:f0:85:c8:0b:3a:70:ab:59:d4:fc:20:63:aa:91:45:
52:de:64:36:2f:98:c2:6b:41:e6:d4:c1:77:c2:32:f6:b1:d7:
73:b3:b4:9c:a2:58:99:0d:8a:57:e7:91:45:b7:4f:f9:f2:5a:
eb:b4:e8:a7:02:26:66:54:f5:cf:70:b9:d1:1a:bc:26:5a:96:
98:e2:e5:43:99:27:db:f6:ef:ad:a6:5f:00:45:b3:ad:95:b0:
a8:b8:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:50 2025 by rpki-client