Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: ZElGlPH+cxL41BuiF9o5Ibkx8RVEsdCRPgLRN9dU96o=
Subject key identifier: 89:20:44:27:58:A7:89:09:59:2B:CC:63:1E:A9:17:3C:D7:F5:F8:71
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019872CF209D3A434B63BF0483ACCFF3E65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 13C4
Signing time: Mon 04 Aug 2025 02:00:33 +0000
Manifest this update: Mon 04 Aug 2025 02:00:33 +0000
Manifest next update: Tue 05 Aug 2025 02:00:33 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: f0gx+yx0BELmP9+AmTn08vTcqfFdo6lNaLcyN0bQVjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:20:9d:3a:43:4b:63:bf:04:83:ac:cf:f3:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Aug 4 02:00:33 2025 GMT
Not After : Aug 5 02:00:33 2025 GMT
Subject: CN=8920442758a78909592bcc631ea9173cd7f5f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:5f:f2:1a:39:e1:6d:7b:ab:6f:c0:69:5a:
f0:40:34:89:b6:4b:c4:23:04:cf:40:36:a7:89:b4:
ea:39:ab:ec:c6:07:35:e9:4d:d2:1b:78:09:75:f7:
a6:b1:1c:fc:b4:71:90:ec:ff:06:10:8c:14:7a:32:
57:3f:9c:c6:11:f7:52:34:2b:ef:60:fb:28:c8:04:
f1:62:a0:35:11:6b:e8:89:1f:4f:20:0f:d7:27:be:
b9:ee:a7:dc:e1:f8:c2:2d:5d:37:78:fc:2c:1b:26:
76:c0:33:dc:35:85:82:a6:f6:c4:ed:9c:f8:95:a5:
49:f1:ee:b4:e7:c8:dc:cf:05:9d:95:4b:27:95:d1:
69:6e:9a:00:74:5e:db:61:8e:53:c0:85:2b:9f:a6:
43:2c:84:00:e3:c3:40:22:b1:ca:01:e3:32:3e:65:
26:27:d4:4a:e6:ee:dd:41:3a:0b:66:fb:f4:19:99:
a4:a0:88:e1:28:59:53:2b:f1:48:40:24:f3:6b:b7:
04:ed:ef:04:07:9e:9d:4a:39:c3:f1:70:f2:98:19:
36:bc:02:a1:f0:d6:4f:54:5e:fb:21:86:98:50:0a:
ac:f2:27:e2:d1:dc:15:dd:0e:10:89:5c:6e:82:ce:
6b:5a:ac:43:b3:a4:59:48:17:3b:8f:17:0d:cc:fd:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:44:27:58:A7:89:09:59:2B:CC:63:1E:A9:17:3C:D7:F5:F8:71
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ea:a2:f3:63:32:f7:61:94:1c:28:20:c6:1c:34:c0:a4:bb:
b6:ad:8a:20:d0:12:59:31:82:3b:77:6f:95:20:30:bc:90:19:
e4:99:34:67:b4:f6:87:fc:c3:7d:31:3e:de:48:67:af:f7:95:
91:7d:79:a5:3f:a3:a2:d4:18:21:21:40:59:03:34:d4:4f:da:
39:51:d1:ab:89:4f:58:44:76:e6:11:43:ce:93:cc:fb:98:33:
32:14:72:34:88:22:8e:e0:72:9e:6b:12:63:47:9a:55:61:47:
fc:7a:b6:41:2a:88:c6:84:24:6b:b4:4f:cb:f1:a8:01:88:35:
e8:3c:cb:5b:85:9e:eb:31:94:8e:5d:ea:ef:c8:72:7d:16:25:
36:cf:ec:00:05:21:76:ae:d6:25:fd:bb:b2:0e:a6:9f:18:6d:
61:7b:7e:a3:8b:90:48:31:43:4c:f8:ef:1f:17:07:17:ad:93:
8c:61:d4:e5:7d:f0:b3:3a:c9:d6:a6:ee:31:6d:03:d4:6f:59:
98:c2:c5:77:e9:2a:12:44:32:dc:89:15:24:0d:66:1d:c1:8c:
7b:9b:80:51:b0:36:16:0f:83:e9:bc:8d:36:6e:9b:f5:15:41:
a0:6f:ca:95:ed:71:7c:a7:a1:d2:20:1b:98:73:8e:09:ef:80:
16:0b:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:46 2025 by rpki-client