Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: xlMnSDqhJU0cUNtqQTRZqq58R2vSPfKDSwyjhtq/JME=
Subject key identifier: 4E:7D:92:AB:98:6C:90:B0:9E:C1:E0:20:F1:73:BC:A7:C9:9A:15:69
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 01977264801FE4F0F5D3241F61DB4169FCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 0851
Signing time: Sun 15 Jun 2025 07:01:18 +0000
Manifest this update: Sun 15 Jun 2025 07:01:18 +0000
Manifest next update: Mon 16 Jun 2025 07:01:18 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: 3wAD/Yoh3GpxlUyuzqRZne8Ooe4rUclVstS94Zeylyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:80:1f:e4:f0:f5:d3:24:1f:61:db:41:69:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Jun 15 07:01:18 2025 GMT
Not After : Jun 16 07:01:18 2025 GMT
Subject: CN=4e7d92ab986c90b09ec1e020f173bca7c99a1569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:ea:02:12:3b:79:6f:d4:72:cf:16:89:54:
cd:23:4b:90:8f:16:a3:d6:5d:d1:aa:42:8f:ca:c4:
4a:2e:78:4c:17:e5:ac:02:02:7e:73:c0:72:df:5a:
a8:11:01:77:1b:df:b1:58:36:d6:74:08:84:16:f0:
8e:0d:52:51:53:fd:ba:6e:11:2d:b5:b5:b2:93:fa:
e5:8e:6e:27:43:11:e5:79:a0:a1:b6:16:de:c0:93:
3c:4b:3d:39:ce:3b:f5:0b:71:7a:bc:59:75:3e:df:
5b:29:69:76:a1:99:91:ab:15:c6:70:49:f1:cd:b2:
e1:d1:ed:0f:5c:ee:71:f7:58:83:77:3a:b3:bf:a0:
a1:a1:df:ab:d6:d3:ea:8e:cf:f9:f9:c4:83:46:16:
3a:9a:62:50:b5:6b:84:3b:ef:08:7d:8e:11:ce:7e:
63:02:8d:dd:d1:ee:6d:6b:f4:17:05:fd:12:2b:66:
32:74:ba:f1:9d:73:02:79:c8:ad:48:dc:eb:75:0d:
08:2c:01:9d:f7:9c:1e:1f:41:6f:a8:82:c2:20:89:
42:15:21:75:59:a0:05:9a:a7:17:c4:e9:cf:4d:40:
58:53:ce:bf:c4:79:83:9b:57:e3:d9:23:63:76:fe:
1b:bd:f0:cc:4a:5a:42:b6:75:ef:7a:9b:9c:9e:a3:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:92:AB:98:6C:90:B0:9E:C1:E0:20:F1:73:BC:A7:C9:9A:15:69
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:27:47:03:77:18:43:80:fb:78:9b:3a:f6:60:d3:fc:8b:70:
48:f0:a8:d4:34:51:c7:a4:8e:2e:04:d9:04:2f:f7:be:17:ae:
a4:1a:ef:c6:eb:e5:cc:98:76:c9:01:96:cd:c6:44:db:fd:bc:
f1:1b:cb:4e:2b:b2:87:f2:ab:59:37:56:f6:1f:51:55:22:c7:
68:d8:e4:b0:b9:78:4f:2d:96:18:69:0f:24:a0:89:88:67:05:
21:4b:8b:81:5f:92:a2:69:b4:f5:65:0e:fe:60:3a:51:be:03:
8e:5c:74:d3:06:1f:b4:82:a1:97:f3:7e:f3:b7:1c:9d:a1:cb:
e2:4d:6c:9d:53:7e:81:66:88:0d:75:9d:e2:1d:c6:0f:80:2d:
d5:e7:3d:eb:7f:d2:0e:88:39:88:7a:7a:2c:9c:37:28:ad:bb:
9f:46:1d:3f:5c:f5:b5:d1:bf:85:06:dc:50:d0:4f:b3:bf:68:
5d:13:5c:9e:9c:cd:b4:cc:b6:e0:6b:c6:43:43:11:a7:53:b6:
8c:aa:ac:66:1a:82:51:fc:6e:2b:8f:50:4c:b8:5c:1f:3e:3d:
16:c3:96:2d:5f:f6:6b:c9:15:fa:79:4d:d8:ad:e3:24:c0:a3:
b9:e7:eb:3a:74:e8:f2:bb:53:06:91:3b:44:0b:34:ce:e9:5c:
f8:8b:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:18:41 2025 by rpki-client