
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: QLFU9+Gw9Am7C+tuq/lQV54kHBO+Q9zqBpawqyCAo/w=
Subject key identifier: 1A:0B:FE:C1:ED:AB:B8:A7:8C:36:FC:35:A4:AA:A9:CD:69:1D:33:01
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 019877F5C734AF3A7673F2906817C0BA2E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 0446
Signing time: Tue 05 Aug 2025 02:00:52 +0000
Manifest this update: Tue 05 Aug 2025 02:00:52 +0000
Manifest next update: Wed 06 Aug 2025 02:00:52 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: gdfN2P/0DcQ/MhgSf1MBomtU5S2+XKNmlOj/vE3jMVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:f5:c7:34:af:3a:76:73:f2:90:68:17:c0:ba:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Aug 5 02:00:52 2025 GMT
Not After : Aug 6 02:00:52 2025 GMT
Subject: CN=1a0bfec1edabb8a78c36fc35a4aaa9cd691d3301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:09:f1:db:40:4f:ae:2f:50:65:ba:9d:70:
01:63:7e:42:45:7c:83:6a:53:d0:0d:54:a2:92:47:
ed:a1:fa:d8:61:fb:99:de:9b:cc:76:46:4d:c9:d4:
ab:24:2f:55:ef:77:df:85:06:35:c7:6c:53:d6:5d:
ae:ad:c9:b8:be:75:cc:cf:bd:21:1a:1d:1e:3e:48:
a9:ee:45:11:1a:7b:f8:4c:94:7f:26:7d:83:3e:87:
31:52:d3:8b:6b:a1:14:61:31:7f:46:dc:31:f1:80:
7f:fd:39:9c:f9:9f:05:c7:b8:13:fc:64:27:9a:b1:
50:12:b0:f5:fe:cd:ce:56:35:22:15:68:eb:fb:b7:
ea:65:76:71:01:00:f6:d7:52:cb:0e:be:34:44:fc:
89:3e:f3:7b:e3:3b:72:14:c8:93:62:da:14:f5:8c:
f7:4c:c2:04:26:23:29:58:47:64:4f:a7:18:b1:2a:
1c:7b:ea:af:03:d9:89:7a:11:0b:2c:1a:1c:04:af:
dd:ad:8b:5e:e3:59:98:fa:65:c1:45:fc:94:6e:62:
c9:b0:23:7d:0d:66:7a:3f:91:91:f1:67:f7:bb:ef:
2d:4b:2f:f2:d7:03:62:30:16:6a:59:a7:80:1b:f0:
5e:1a:3e:5d:b2:81:23:1a:8e:1f:18:94:d1:72:c2:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:FE:C1:ED:AB:B8:A7:8C:36:FC:35:A4:AA:A9:CD:69:1D:33:01
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bc:7c:3d:e8:5a:2a:f8:d8:0d:5b:30:bc:60:17:bc:72:93:
8a:bc:7f:0c:78:dc:27:83:d5:f4:88:97:c9:46:55:19:b6:fc:
8a:97:11:68:1c:9a:83:fc:b0:6d:63:84:e2:ae:a0:40:d8:02:
60:ed:63:42:48:8d:75:92:6f:45:f3:2b:b1:13:6a:b3:e0:ae:
8e:4a:c4:6d:13:30:32:34:de:74:fa:d1:d8:c7:d4:77:98:51:
c8:58:8c:99:53:ec:b3:4f:3b:8c:cf:6b:4d:6c:a8:cf:71:16:
56:1b:41:3e:12:40:dd:2a:6a:1d:aa:88:96:44:6c:da:3c:9e:
a6:0d:a8:f0:da:65:51:f0:9c:7c:1b:78:41:31:ed:50:84:29:
8a:5d:af:75:02:5a:9b:a8:f0:2f:31:df:bf:e8:88:dc:7e:3e:
47:47:5b:93:8f:63:32:e1:05:75:93:96:af:e8:9c:0f:9a:31:
42:0e:9f:e9:14:b8:47:50:da:60:a8:77:1d:b0:cc:11:9f:9e:
f9:32:73:e0:cc:57:5a:65:eb:ea:07:97:2f:21:27:a4:4f:0e:
cb:45:8d:a2:e7:36:ac:64:7f:8e:a3:47:cb:60:2f:8e:c2:5d:
6c:c6:50:12:a0:66:f8:95:b7:49:fe:5b:2a:56:fb:3d:16:dd:
ce:18:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:38 2025 by rpki-client