Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: dFDiCnulTC58tj4urLjMwNCKe0aD4gAooubYhUAttn4=
Subject key identifier: 54:8E:6F:C6:10:AE:10:DD:0E:72:D7:50:8D:59:EA:88:DE:F9:11:2B
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 0198917E6BCA6951F9E229B14D4BEB6993B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 053D
Signing time: Sun 10 Aug 2025 01:00:37 +0000
Manifest this update: Sun 10 Aug 2025 01:00:37 +0000
Manifest next update: Mon 11 Aug 2025 01:00:37 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: K0kmZVasqAwVGIsa0ai6HWziG5RUNaVdDvLzGuSucYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:6b:ca:69:51:f9:e2:29:b1:4d:4b:eb:69:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Aug 10 01:00:37 2025 GMT
Not After : Aug 11 01:00:37 2025 GMT
Subject: CN=548e6fc610ae10dd0e72d7508d59ea88def9112b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:2f:47:08:2f:fd:2c:82:99:5f:54:da:d1:
cf:6d:f5:59:fe:f3:05:dc:eb:17:57:c3:9d:1e:d1:
72:7a:aa:bb:9c:fe:f6:88:6f:ad:d2:0f:a8:c5:ed:
a7:41:1a:5a:66:bd:70:e2:b4:4f:fb:86:75:83:a3:
8d:b4:01:59:a9:2d:9e:a8:8f:3a:dc:b3:3c:d7:6f:
5b:6c:5a:08:08:f0:d3:59:25:dd:d5:f7:04:14:e5:
0d:6b:87:5d:f5:08:0c:4a:19:e7:9b:7e:32:19:5e:
7d:d1:06:cd:aa:ce:ac:13:13:9e:a3:82:77:ca:42:
65:f9:fb:22:34:2c:fe:86:ed:f6:9d:41:49:ca:e9:
94:b9:1b:2a:cf:66:9c:67:0d:77:63:a2:9c:af:91:
73:ad:f6:e3:41:36:b3:77:13:27:2d:58:30:60:99:
02:52:64:ec:50:6b:e9:3b:f0:8a:d4:93:36:a2:04:
01:d7:13:1f:75:c4:12:f0:a8:76:92:09:b0:b0:03:
30:6a:b8:b4:48:78:02:19:59:55:60:ee:53:ac:78:
2f:26:01:ed:5b:fa:70:39:6b:9e:a4:03:7a:8e:c8:
e7:fd:55:20:d1:ed:94:4f:db:2d:01:2f:92:84:2f:
77:4c:29:26:34:25:37:79:ce:03:74:cc:bf:3c:36:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:6F:C6:10:AE:10:DD:0E:72:D7:50:8D:59:EA:88:DE:F9:11:2B
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:3e:55:81:5c:91:72:ac:96:58:18:f1:94:53:1e:df:34:
ce:ac:0a:e4:7c:c4:82:2f:5a:42:bd:d5:8d:bb:d2:03:b3:de:
74:22:58:02:c8:4b:f9:13:a5:71:c4:cf:80:08:a9:a5:e3:50:
d9:e6:8a:94:3f:58:25:c2:30:ce:d1:2d:a7:c3:1f:e7:7d:1f:
df:ee:2f:08:55:1a:e4:59:0c:f4:62:d4:dd:d1:9c:41:43:88:
a4:0c:81:df:82:9e:dd:65:50:e4:e7:ad:84:09:4d:21:db:02:
9e:59:dc:b5:a4:0a:ff:25:36:eb:c2:c8:f2:31:29:af:f4:1b:
b4:82:59:17:b8:de:68:af:c6:e3:73:3d:e6:52:55:66:f3:a5:
6f:0f:78:6b:9f:3a:8c:4f:6c:e6:91:22:ae:ea:14:dd:7f:2b:
e3:ec:92:21:bd:96:5d:33:f3:c2:89:85:3f:16:19:98:bc:50:
cc:3a:88:f2:d2:4f:67:18:75:37:ff:93:39:69:fb:51:ce:2e:
db:35:70:66:4f:10:b5:00:d3:3f:42:36:7f:65:80:74:a8:00:
cf:aa:35:4d:75:77:be:98:ee:51:d4:bf:58:ab:3f:36:22:73:
f5:a5:6a:82:25:1c:6b:1a:e4:80:1f:9e:e3:e3:46:a8:7a:72:
ee:ec:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:13 2025 by rpki-client