Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
File: Lamd3TmQcoABaWYXi_aOXEY8LrY.mft (raw, json)
Hash identifier: u7XYMSTcTmkALQXsOnEwjRBoL+Did5rj6PeEK6C+lXQ=
Subject key identifier: C1:54:65:F0:4F:C1:4B:E7:AF:BD:FD:89:8E:59:B1:B9:2C:54:F1:81
Authority key identifier: 2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
Certificate issuer: /CN=2da99ddd39907280016966178bf68e5c463c2eb6
Certificate serial: 01988CFCDCE41B7FED3B03B15809AE54E85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
Manifest number: D8
Signing time: Sat 09 Aug 2025 04:00:38 +0000
Manifest this update: Sat 09 Aug 2025 04:00:38 +0000
Manifest next update: Sun 10 Aug 2025 04:00:38 +0000
Files and hashes: 1: Lamd3TmQcoABaWYXi_aOXEY8LrY.crl (hash: Igf9fFvWFDBXUHxxSCH7t4QE+qXYVBVYFalM/N32Tyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:dc:e4:1b:7f:ed:3b:03:b1:58:09:ae:54:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da99ddd39907280016966178bf68e5c463c2eb6
Validity
Not Before: Aug 9 04:00:38 2025 GMT
Not After : Aug 10 04:00:38 2025 GMT
Subject: CN=c15465f04fc14be7afbdfd898e59b1b92c54f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:96:f6:c6:d4:8d:36:2a:c9:9c:a3:8e:6e:
84:cd:e5:c5:53:86:1d:b6:01:2a:6a:6d:5f:91:dd:
16:db:0e:c2:e5:d3:fd:34:dd:1e:56:6d:e6:15:b3:
9f:9a:77:c4:62:4d:64:2f:7a:26:d5:23:4b:c6:55:
21:fa:36:e3:f4:8c:df:d9:17:95:a1:a0:5c:6f:4d:
9e:7a:c7:a5:a9:35:67:2c:9a:d3:d8:05:9c:15:fb:
0b:bb:4e:00:5d:7c:2b:bb:38:7a:18:12:b8:1a:bc:
a0:08:c4:10:dd:60:32:b3:9d:af:94:5c:59:7d:65:
0b:3d:af:a0:61:22:38:93:9e:3f:87:7d:2c:47:b4:
f2:0d:c4:28:49:01:d0:35:0b:4d:11:32:35:71:ba:
f1:d9:80:fa:6d:41:62:99:22:a1:1b:75:35:db:9f:
71:79:66:e7:79:49:8d:ed:0e:76:00:05:3c:87:7e:
17:27:57:0a:45:92:d9:d3:70:6d:44:f3:3d:11:9d:
9c:f1:a7:88:5d:f1:d6:10:bc:be:76:88:bc:a9:33:
6b:9c:f4:e3:84:e0:b6:8e:a1:38:df:4a:b6:1c:80:
69:e6:f2:90:4f:ca:1a:ce:34:aa:e8:8f:fd:06:56:
39:99:86:90:63:30:8c:e6:ed:97:33:ae:6c:ff:c6:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:65:F0:4F:C1:4B:E7:AF:BD:FD:89:8E:59:B1:B9:2C:54:F1:81
X509v3 Authority Key Identifier:
keyid:2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:85:95:53:41:5b:3f:62:e5:ef:53:c4:8f:9d:ef:80:78:
fd:19:4b:5a:72:36:d9:ed:c2:f8:5e:75:f2:18:cb:9f:d1:19:
44:18:88:e3:a7:27:64:47:b8:28:84:af:9b:3b:ff:cc:c6:a8:
7b:31:8f:71:85:76:a2:ae:ab:62:b3:ac:d0:a3:20:0e:2b:80:
eb:dc:df:4f:c3:97:99:bb:a5:e9:9d:39:9a:eb:7a:3c:1b:33:
0f:d5:0a:87:de:cf:c3:fe:9a:de:ce:ad:63:11:a4:2c:44:a2:
4a:0b:7f:c1:8c:49:1d:15:a9:0a:08:d8:83:5a:8a:bb:fc:23:
c6:1f:bd:37:7f:62:65:df:6a:cf:c4:c7:7b:e1:5b:cf:fb:26:
36:b9:8a:4e:65:f1:ce:83:56:af:55:ee:f6:01:d6:26:6e:70:
e3:db:7f:88:3d:5d:4e:b2:6a:c7:cc:02:22:43:28:2e:c0:01:
3c:5b:1d:75:0f:d7:92:36:be:0b:b2:1c:22:90:0d:00:72:eb:
8e:6b:dd:dc:94:8b:a3:7d:27:01:cc:56:64:f4:66:f7:4e:bf:
14:a5:7a:fb:fb:92:30:61:0a:38:fe:28:0d:f2:ed:40:aa:c8:
ea:f8:d8:b0:44:c6:27:02:66:4e:72:55:a4:6a:80:65:aa:da:
75:88:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:28 2025 by rpki-client