Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: XHn/mwh9vAxA/vwJO62gL5jZfMPQRQ9Z2JIm91p7HAw=
Subject key identifier: BC:1C:7F:3C:A7:B1:6C:89:96:E0:2C:4A:A6:F4:35:41:AB:51:77:C4
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 01988CFE76BDD85B8E433ED675309BDE8003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 14AB
Signing time: Sat 09 Aug 2025 04:02:23 +0000
Manifest this update: Sat 09 Aug 2025 04:02:23 +0000
Manifest next update: Sun 10 Aug 2025 04:02:23 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: u/PpNJJmlXMGXcMKbblRZL3CD+ccU+VpWsNLkuuxDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:76:bd:d8:5b:8e:43:3e:d6:75:30:9b:de:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Aug 9 04:02:23 2025 GMT
Not After : Aug 10 04:02:23 2025 GMT
Subject: CN=bc1c7f3ca7b16c8996e02c4aa6f43541ab5177c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:66:1e:b7:8c:cc:b3:2d:57:4c:70:83:6c:
9c:b2:35:a8:4b:c3:7a:cf:2b:e0:5c:09:b8:23:a0:
6b:23:39:bb:97:4f:04:64:f5:bf:bb:5c:d6:d9:6c:
57:4d:a8:eb:b0:1d:4e:24:7f:e3:11:97:97:2a:f7:
e6:43:15:39:c7:2e:06:d8:34:6b:16:d5:a2:cd:c7:
7f:ef:5a:8e:15:4c:2f:05:25:7b:ab:8a:d9:a5:b9:
ab:ed:1d:70:8e:4b:02:9d:19:9d:fb:2e:c2:46:a5:
24:04:e2:8d:03:25:48:95:59:25:fb:14:11:14:20:
80:f5:62:6e:ea:c2:71:51:ff:84:7c:4e:3c:b2:ad:
6b:08:9b:b1:1a:22:f1:be:51:cc:8d:ee:d6:a6:c5:
e5:53:43:30:03:dd:d3:62:35:29:24:40:bb:6f:24:
0f:11:4a:8d:88:b4:98:07:ff:66:5a:bc:3a:16:f3:
0e:0d:4a:db:ad:e9:d9:7d:12:25:fa:50:d9:6d:dd:
04:5d:17:cd:95:3b:2a:31:fb:5a:df:ba:22:22:46:
96:c2:5b:22:25:b7:34:08:46:81:5e:0f:cd:01:33:
e9:1d:47:56:2c:e4:e8:91:34:0a:e6:96:b4:54:c4:
1d:cb:83:ca:c5:ad:ae:63:39:51:5e:53:97:2f:1b:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:7F:3C:A7:B1:6C:89:96:E0:2C:4A:A6:F4:35:41:AB:51:77:C4
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e0:7d:64:b4:02:06:6c:5f:54:c8:59:c5:83:0a:a5:e5:3c:
32:53:c4:df:4e:ef:fc:42:e9:29:64:00:dd:90:88:b2:0a:5c:
6d:8b:27:65:d6:07:d9:ec:6e:ee:61:ab:6c:2b:3a:7c:c4:0f:
7b:f2:a5:6a:f1:01:50:72:17:ac:65:85:14:f2:a1:db:9d:5f:
23:02:1e:5b:2e:17:a9:65:ff:b3:d1:1d:83:0c:6d:c7:71:32:
cb:15:58:1f:44:65:83:dc:e6:67:91:b1:36:6f:cf:dc:6e:a5:
23:21:e8:f3:99:8a:c7:5e:95:e7:e2:ae:5a:d1:4b:30:37:ef:
49:e4:f4:79:f3:5e:d6:94:6f:df:06:7d:c3:83:4b:a6:ec:9b:
33:c8:9a:d9:84:95:81:6f:f8:d5:20:45:27:44:88:3a:c6:81:
4a:9d:f4:cb:8f:fa:1b:78:80:db:1b:62:4c:fb:07:e4:12:1f:
7b:1a:3b:76:1c:1c:22:11:c9:c1:c3:be:dc:8d:96:cb:8f:88:
40:77:71:e1:36:6c:f7:ad:9d:6a:50:ac:c8:80:68:95:aa:45:
92:f0:40:21:14:b9:40:41:b8:88:17:9e:6e:f8:e6:a7:00:d1:
02:04:b0:bb:38:d1:fb:95:aa:1d:96:7d:60:fd:d3:15:92:7e:
a8:ae:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:24 2025 by rpki-client