Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: a5c3Xt3AeneD0/wMsaR3Y1hsJp7MejEkWKRnBsMeJAs=
Subject key identifier: 74:3A:D8:00:96:32:19:15:A2:C9:78:E1:39:83:70:21:EE:39:0E:D5
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 01988CFDD837FCDB1A7BF110E4F9B3066F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0DE3
Signing time: Sat 09 Aug 2025 04:01:42 +0000
Manifest this update: Sat 09 Aug 2025 04:01:42 +0000
Manifest next update: Sun 10 Aug 2025 04:01:42 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: rwJGb7Bp0yMhDNIpXtARUENfBpxg79sMK5oe6hB0qZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:d8:37:fc:db:1a:7b:f1:10:e4:f9:b3:06:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Aug 9 04:01:42 2025 GMT
Not After : Aug 10 04:01:42 2025 GMT
Subject: CN=743ad80096321915a2c978e139837021ee390ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:6b:a6:d2:f7:16:95:2f:02:ac:24:38:12:
8b:32:d8:32:af:4b:c4:35:bb:56:ee:60:bf:b8:e3:
dc:61:97:3d:e7:de:ec:8f:d3:7a:70:39:b8:2c:d1:
e8:ea:71:fe:23:70:ee:a5:4c:48:5b:6e:f9:62:c0:
6e:b1:2f:d9:ba:f3:1d:fb:68:c2:15:e9:c2:e3:5e:
83:08:c8:3e:c7:ad:99:cc:86:96:d7:78:49:6a:77:
84:70:5d:88:38:c5:c0:6a:4a:74:6d:bf:b9:17:04:
7e:90:f4:1d:c5:51:e3:99:ff:b4:24:92:29:e5:8d:
0e:c5:6c:6e:a3:81:9c:4e:74:b1:97:f7:4d:e3:5b:
59:f5:43:c7:a5:56:a3:20:6d:b3:7d:0b:a3:b9:42:
09:32:47:78:f5:95:27:3b:b7:c4:eb:3e:bf:25:a4:
03:ea:be:54:64:47:61:54:8b:48:24:fa:9a:52:7d:
07:d8:3d:a8:93:d4:93:2b:55:a9:28:87:91:6e:42:
0b:f7:df:74:3a:9a:62:35:4a:d2:41:18:2f:23:12:
d5:4d:c3:5c:31:e4:14:8d:22:c1:11:58:13:7c:ce:
8b:30:25:1e:53:f3:a5:72:92:13:cf:7d:45:83:c3:
e2:4b:7b:a9:14:e8:d8:23:c7:36:c3:51:41:2b:22:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3A:D8:00:96:32:19:15:A2:C9:78:E1:39:83:70:21:EE:39:0E:D5
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:e1:7c:ce:82:20:a0:2f:3d:01:2c:6a:bc:32:f9:55:b3:
0c:45:ec:bc:dd:6d:59:53:20:79:3a:de:8a:08:92:d6:20:ae:
60:84:bc:b3:cf:9e:4c:d4:12:26:31:8c:2a:7e:9d:4a:45:94:
84:f5:6d:f6:e8:64:40:da:8f:31:b8:e1:4d:05:c0:19:86:d0:
7c:58:f0:52:80:7c:36:19:a9:0c:d5:51:53:c6:52:b0:f6:90:
a2:39:99:2d:60:af:d9:17:23:ba:99:a2:8f:72:24:6a:a9:27:
fb:08:9e:2c:01:6f:4b:fd:be:a8:6f:ee:36:12:12:ad:bc:c7:
00:24:61:79:bf:96:91:b7:f9:b0:74:5d:f1:c3:ed:37:2a:ed:
13:a1:f2:5a:ec:54:96:cf:4c:f3:eb:a0:34:9b:df:96:c7:66:
99:d4:db:9d:3b:56:29:93:e9:22:b4:d9:1b:a3:0d:bc:fc:19:
fa:43:c7:4b:a6:a2:f7:0e:bb:ba:93:20:7a:bf:4f:ab:04:c1:
83:f3:6c:60:fa:71:40:76:ae:e1:81:c1:c5:36:45:c3:06:f0:
42:d0:18:f5:84:94:e1:ef:1e:1c:52:ac:15:be:71:4c:ef:80:
e3:7d:04:e6:86:06:34:76:d8:3c:96:55:d3:54:47:e3:69:4b:
91:d7:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:58 2025 by rpki-client