Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: rLd+7x8WydrqVLlD493dDZjXDyTLdKDqlgb/a7dy120=
Subject key identifier: 2C:50:8D:FA:BD:D2:F2:3D:A5:29:EA:71:E5:D3:BF:F3:DE:29:76:73
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 01976D3E8053FA2AB7B08835FE76AB24197F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1416
Signing time: Sat 14 Jun 2025 07:01:41 +0000
Manifest this update: Sat 14 Jun 2025 07:01:41 +0000
Manifest next update: Sun 15 Jun 2025 07:01:41 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: 8SOhNVgNl9RJAPveOTsdjuZsAEKDDD7fu1dymXdQa8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:80:53:fa:2a:b7:b0:88:35:fe:76:ab:24:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Jun 14 07:01:41 2025 GMT
Not After : Jun 15 07:01:41 2025 GMT
Subject: CN=2c508dfabdd2f23da529ea71e5d3bff3de297673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:ed:0d:62:72:ab:fa:72:0d:d2:ae:b4:e7:
6e:a5:a4:54:d9:f0:06:57:01:03:75:60:38:18:a9:
75:ac:5a:7e:64:7a:11:a4:e5:c4:16:7b:87:cc:f7:
c1:79:d7:a4:44:c9:32:84:68:86:ff:05:bd:17:fc:
ce:7c:66:eb:1d:d4:ff:70:76:8d:f1:93:73:1d:74:
d5:5d:de:ed:e7:80:9f:10:2c:6f:e7:42:9b:fa:7e:
55:90:c8:12:df:bd:40:99:e8:da:31:6f:7b:f9:66:
48:8b:4f:4b:f8:27:d0:eb:67:8c:13:9f:ed:d1:49:
e0:21:d3:29:b2:58:f8:a6:50:9d:cd:b4:65:1f:34:
b2:7c:85:48:9f:48:6a:27:a0:d9:27:c8:60:51:1d:
b1:fd:54:de:86:80:0b:0a:46:1c:12:c7:89:f5:06:
a1:5e:c3:66:37:cf:1c:38:59:a7:75:b7:06:fe:61:
3a:65:da:b5:54:a0:8a:b1:d4:98:52:69:f7:b3:86:
b9:6d:8f:05:37:1b:24:4b:35:42:94:6c:61:e5:da:
29:af:35:9d:7d:4f:bc:5b:e5:d0:1c:9d:02:d5:9d:
4d:f2:ef:d6:36:54:38:9b:34:d1:7e:66:f2:c6:c0:
63:a8:00:69:45:fa:1f:fe:cd:70:74:94:4d:8d:cb:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:8D:FA:BD:D2:F2:3D:A5:29:EA:71:E5:D3:BF:F3:DE:29:76:73
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:78:5c:c8:4b:58:76:ec:e6:8d:d0:9a:eb:9a:cd:aa:0a:fc:
2a:2c:92:d3:a7:e5:03:fd:af:ec:45:da:5b:39:e1:e6:43:a3:
4b:77:23:88:90:c0:0e:58:2b:3a:fe:2f:33:c6:06:5e:ef:fc:
7f:b8:e6:c1:05:c4:39:d9:fb:5b:26:28:f5:c6:6b:cd:aa:40:
9d:72:1b:d2:3f:44:7b:73:f9:e7:12:59:dd:14:d5:02:be:55:
8f:73:0c:b1:05:33:56:c8:91:13:7d:e3:09:78:c3:9d:90:77:
89:6a:ab:0f:74:b9:18:5a:da:78:61:74:b1:1b:af:6a:3f:e5:
27:9a:3a:a9:e9:8f:bd:92:4a:19:e0:12:e1:96:e0:98:47:e6:
28:4f:9f:8c:c1:5d:da:f4:2a:c9:ba:20:71:31:37:d7:08:65:
49:65:49:0e:b6:45:6c:77:19:2c:55:ce:93:fc:d5:7c:6b:bd:
7a:24:17:b9:fe:f3:29:5f:71:18:0e:fe:06:9c:f3:4c:8f:b4:
a1:bc:54:dd:01:ae:71:e0:2a:52:09:7f:5e:22:fd:e7:ca:7e:
f0:29:d2:27:8c:c2:22:b9:8f:e6:06:7c:eb:ea:21:a3:7d:89:
a4:88:44:03:5e:fe:09:e1:a7:23:9f:05:49:a5:8a:e7:95:f6:
c3:f8:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:31 2025 by rpki-client