Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: VJDxB2TYKtQ+r97grLl8hJQyHps/qW80SI8KIt6RVQc=
Subject key identifier: 09:27:BB:E7:D2:10:C1:F6:84:54:A5:B5:18:57:39:B3:3D:33:28:84
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 01977978C2FC84B9D2C1E5C2D925E2BF81BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 04AC
Signing time: Mon 16 Jun 2025 16:00:46 +0000
Manifest this update: Mon 16 Jun 2025 16:00:46 +0000
Manifest next update: Tue 17 Jun 2025 16:00:46 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: sbffbqpITmwIbhgYwRQ2HgewmWQ3IZOjP2uoTucvJ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:c2:fc:84:b9:d2:c1:e5:c2:d9:25:e2:bf:81:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Jun 16 16:00:46 2025 GMT
Not After : Jun 17 16:00:46 2025 GMT
Subject: CN=0927bbe7d210c1f68454a5b5185739b33d332884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:2d:06:f9:21:88:1b:7d:b9:12:e2:03:ff:
aa:c5:65:9b:c2:b5:5f:cb:54:9e:d5:7d:68:a2:02:
73:f9:60:f5:9e:c0:29:9e:91:f3:26:fd:7a:33:47:
d8:65:78:0d:32:43:80:75:9f:89:59:57:f2:81:b4:
e0:1c:9b:73:d1:02:d5:04:a2:9f:1a:ef:77:fa:36:
35:b0:6b:6c:60:2e:78:44:9a:0c:85:78:6d:32:6b:
5b:49:c9:0b:c8:f1:39:4a:db:cc:88:b3:8c:02:ec:
81:a0:59:ad:82:e5:96:0e:73:a9:f5:44:d8:de:d2:
40:27:db:0a:d3:a9:29:d6:00:34:20:60:a9:6b:8d:
ec:a4:b5:b0:0e:56:44:10:64:52:e5:42:e1:46:ce:
69:90:75:d0:44:67:f1:fa:a8:55:73:8d:60:07:81:
90:f1:77:b8:27:a5:db:37:11:1a:9a:77:8e:67:16:
fb:1a:0a:65:a7:0f:2c:14:46:cb:31:ab:b3:6b:7b:
c0:28:77:d9:c0:aa:68:5a:7b:77:0c:a7:53:ca:76:
b9:79:b5:61:8e:2c:fc:e3:bd:b3:8f:4c:8d:35:01:
82:32:2f:3a:ba:53:93:6f:17:86:d1:a3:7a:88:a7:
cc:e0:10:26:85:c5:46:5a:7a:f7:14:ca:7f:56:96:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:BB:E7:D2:10:C1:F6:84:54:A5:B5:18:57:39:B3:3D:33:28:84
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:f7:b0:ee:96:bf:60:aa:86:c8:89:60:70:e6:6a:08:fd:
e5:14:73:18:89:fe:d1:a7:86:58:8d:17:1f:ed:99:4c:ab:41:
7e:55:91:68:5e:f4:57:13:29:a5:e1:80:78:69:7c:01:b6:f9:
a2:4c:81:56:6e:29:ce:a6:14:ca:33:cf:bf:28:10:19:cf:44:
a4:38:5c:cf:a0:67:b1:e4:7d:03:67:4b:c9:73:5f:0a:b5:ea:
32:77:be:41:d2:dc:8f:93:89:5f:1d:ec:57:f0:42:1b:b6:00:
47:b6:ce:ac:84:d3:9d:ed:03:1d:29:98:90:11:a5:a7:47:4b:
f5:c0:20:52:83:53:8c:15:26:07:f4:62:07:60:af:4c:2e:3e:
1f:33:7a:1d:1e:99:0a:93:40:9a:ac:86:98:22:63:6a:04:73:
df:47:64:d0:27:b9:b6:e9:45:fd:7b:ad:27:ab:da:19:b5:63:
3d:a0:e1:3d:0a:d1:d6:97:eb:33:d2:93:f4:51:28:7c:4f:65:
45:28:e7:79:84:a2:84:6d:69:99:5b:bb:9e:61:9f:e3:4a:65:
ef:8c:ef:53:4d:9f:ab:c7:7c:ca:4f:68:86:4e:d5:57:bd:5c:
58:19:d2:fb:d0:a6:d0:55:ab:35:48:bf:49:37:fe:7c:07:a9:
be:43:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:41 2025 by rpki-client