Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
File: Lamd3TmQcoABaWYXi_aOXEY8LrY.mft (raw, json)
Hash identifier: FueoLePNF0K1byN+ksIZjP5FzyTqTfldhKGsL0LJUbo=
Subject key identifier: F4:1A:3C:FF:46:19:F6:47:D3:43:73:C9:F4:A3:C8:E2:E9:61:B8:CB
Authority key identifier: 2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
Certificate issuer: /CN=2da99ddd39907280016966178bf68e5c463c2eb6
Certificate serial: 0197789D0800493D2EB8F546B20C2F6B43F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
Manifest number: 49
Signing time: Mon 16 Jun 2025 12:00:46 +0000
Manifest this update: Mon 16 Jun 2025 12:00:46 +0000
Manifest next update: Tue 17 Jun 2025 12:00:46 +0000
Files and hashes: 1: Lamd3TmQcoABaWYXi_aOXEY8LrY.crl (hash: 9mqANuqY4rwcMtqrPbZ8JM3Ak+CSflZ4zUJQiNoxBJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:08:00:49:3d:2e:b8:f5:46:b2:0c:2f:6b:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da99ddd39907280016966178bf68e5c463c2eb6
Validity
Not Before: Jun 16 12:00:46 2025 GMT
Not After : Jun 17 12:00:46 2025 GMT
Subject: CN=f41a3cff4619f647d34373c9f4a3c8e2e961b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:16:a4:0f:af:e0:85:2c:27:0b:42:dd:f9:
ac:6f:26:c3:2a:1d:fe:6f:fa:b0:50:a5:50:84:6c:
cf:3a:62:e7:bf:4a:17:06:ad:52:e9:ca:7a:1b:28:
b3:f1:96:85:73:3a:90:08:5d:07:c6:43:87:94:43:
a8:c4:e5:7d:14:86:75:80:29:8e:a5:c6:b3:34:b5:
4a:95:f9:54:46:9e:18:1c:c1:22:79:b1:e5:ce:53:
d2:41:bf:5d:a2:56:89:f5:d9:40:63:c2:d6:ff:3a:
77:2f:01:4d:db:67:6a:90:f7:89:7e:56:56:35:20:
4d:12:26:7d:30:d7:77:7b:2d:c9:2c:c0:97:b3:1a:
fd:e6:07:2e:c7:7a:7d:1c:c2:83:4a:a9:34:f9:68:
c7:de:47:20:e5:eb:33:30:bd:83:54:5c:13:51:21:
9a:08:b5:49:6d:2a:09:65:da:86:9c:5a:e4:70:e7:
e7:90:e4:b5:07:d4:3f:6f:4b:7e:11:70:cb:c0:8d:
8a:bd:ad:fa:10:c9:b7:5a:69:66:61:35:b6:fc:1a:
68:af:8f:09:c6:1e:22:f1:82:b1:12:ea:70:30:cf:
d6:43:9b:97:07:93:45:57:f8:9d:f3:ad:11:4c:78:
40:2d:d5:85:ae:31:2b:5a:bc:24:cc:f9:e6:26:34:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:3C:FF:46:19:F6:47:D3:43:73:C9:F4:A3:C8:E2:E9:61:B8:CB
X509v3 Authority Key Identifier:
keyid:2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:27:d8:2e:87:a4:fc:b5:f4:16:95:7a:b0:98:91:ae:43:
81:c3:98:6e:1c:4d:63:b6:f0:2d:03:e5:5c:5c:49:7e:01:af:
ad:b3:f7:8c:cf:bf:7f:ac:86:25:ec:7a:7b:08:26:e0:4d:56:
2e:3e:ed:2a:4b:45:00:bc:9b:f7:3c:b4:25:55:b0:df:b7:f2:
3b:58:da:6d:e3:2f:2c:6f:1e:f1:69:fa:e7:8f:32:73:89:db:
3d:48:18:30:e7:98:52:fe:87:5e:e3:7b:e0:0b:44:9b:e5:fe:
1d:1e:bf:28:60:b9:06:dd:e8:db:97:d7:0d:7b:37:f2:25:4f:
bd:65:1c:a1:37:b8:55:fb:4e:40:4c:e4:30:ca:3b:ba:ea:55:
55:17:86:c2:1e:2b:02:5b:95:41:3f:19:77:87:d4:8b:c5:18:
66:8b:bb:4c:9d:1b:4a:26:dc:a8:ad:55:ca:d6:d0:03:9f:5d:
68:e7:12:5d:5b:e5:b0:80:dd:94:8c:07:b0:cc:eb:99:38:50:
c8:90:c4:35:c5:38:ed:47:bb:08:e5:17:cb:0a:af:a5:58:61:
f9:ce:ed:bd:d7:c8:b3:2d:e5:d1:ed:5d:74:32:19:76:81:51:
3c:94:eb:f3:f9:6a:72:12:75:32:f6:cf:b9:51:1d:44:94:04:
e9:b3:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:07 2025 by rpki-client