Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: wZTSWG8TGOZP39ZrqPbUcydGN5lh81afq042PSDoVfM=
Subject key identifier: 37:B6:ED:6E:21:12:EA:53:08:E9:85:60:EA:30:28:D5:E0:84:51:93
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019769CE86368862EB2483C9C1255BDCAF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:00:31 +0000
Manifest this update: Fri 13 Jun 2025 15:00:31 +0000
Manifest next update: Sat 14 Jun 2025 15:00:31 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: cNYPEeYQICB5tXs4PNupJr+FkhCl0oS/sZ/S5+1qnds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:86:36:88:62:eb:24:83:c9:c1:25:5b:dc:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Jun 13 15:00:31 2025 GMT
Not After : Jun 14 15:00:31 2025 GMT
Subject: CN=37b6ed6e2112ea5308e98560ea3028d5e0845193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:79:1e:a0:57:a6:e8:52:d3:54:ca:b7:5c:
81:46:3b:12:61:9d:6c:c9:e2:7e:68:0e:ce:3b:c7:
51:a2:3c:31:e7:8c:be:5c:86:8b:e1:af:4e:db:80:
36:ea:27:c2:0e:b1:e2:59:b4:e4:20:ff:8d:3a:db:
ce:83:ca:66:4e:26:6c:7b:b7:66:c2:33:ba:81:96:
2f:53:0d:ce:55:22:1a:40:8e:e7:a9:13:a4:86:02:
73:b5:21:cb:07:11:78:8f:6a:ff:7f:5e:cc:79:12:
16:dc:6d:da:e6:d8:92:cb:08:7c:41:40:2b:04:42:
64:0c:6c:2e:03:10:ca:26:43:fc:06:01:17:0e:ec:
2d:82:45:6d:63:2e:2b:fe:61:3e:cf:54:87:56:39:
43:bf:3c:dd:bc:4c:15:d2:da:38:0c:66:34:26:c4:
d4:98:36:94:f1:83:1b:44:db:0b:9f:2d:ff:00:d5:
4e:e6:b6:63:9e:33:97:2f:14:47:d7:24:c1:f7:20:
f8:9f:66:51:94:30:dd:4d:db:bf:22:f8:74:33:38:
a3:7f:11:b3:ff:f0:39:46:49:d7:eb:de:cd:64:be:
58:0e:d5:ce:79:fa:89:1f:b6:96:ee:ed:75:fb:14:
0c:40:ee:da:04:e0:2c:3e:d4:ed:2f:fa:8c:a9:0f:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:ED:6E:21:12:EA:53:08:E9:85:60:EA:30:28:D5:E0:84:51:93
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:4f:7e:bb:7d:90:25:8e:41:bc:03:5f:67:86:1d:85:04:
ae:9f:dc:de:46:d3:61:a8:b6:8c:6f:83:0c:b9:e0:2c:df:98:
c4:5e:1a:4d:29:2e:4f:4a:a4:8b:66:3c:33:7b:32:ad:fa:89:
bd:73:2f:39:0f:ce:03:56:01:fa:93:5e:b2:7f:ef:b8:4f:ff:
b5:60:31:da:be:10:d6:c6:0b:9b:cf:71:38:64:be:c3:0e:ac:
c1:f7:08:a5:1e:30:62:eb:6b:de:51:1f:ff:bf:9d:70:87:b1:
dd:b1:36:6e:58:14:4a:fa:ce:d8:f8:63:cb:de:cc:1a:7f:ab:
4c:79:63:89:4b:8a:ff:76:20:47:41:47:74:29:d7:94:15:e5:
5a:4b:22:4a:6d:7a:e3:88:7d:6f:d2:1d:5b:44:c6:1b:95:02:
4c:5e:36:3b:71:cb:67:73:84:63:bb:ec:5a:7e:93:b0:dd:fd:
35:5a:5e:67:9d:77:6a:3a:e0:51:52:f1:7f:01:48:cd:b8:2e:
dc:76:67:aa:68:7c:19:57:da:7c:1e:55:a4:91:f2:ee:58:34:
b6:59:c1:35:63:36:5c:7a:9a:23:f8:c7:65:de:be:11:b9:c6:
79:08:c8:26:90:4b:d7:21:ee:06:7e:32:d8:00:bd:2b:cb:08:
db:c6:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:19 2025 by rpki-client