Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: KV8KROu89qN72pPQXQPY0ytlikrB6sNxD+yrTTpdaBw=
Subject key identifier: 4F:C1:CE:EB:DE:DD:16:E9:67:F8:8C:FD:F7:58:F9:30:6A:79:4B:27
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 01976D3E7DF3119B1692518F17DF7A01AB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 12AC
Signing time: Sat 14 Jun 2025 07:01:41 +0000
Manifest this update: Sat 14 Jun 2025 07:01:41 +0000
Manifest next update: Sun 15 Jun 2025 07:01:41 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: pk/8H/fQfJqAMkmv20dPBIuxCSin/s75uEuoKhvUOKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:7d:f3:11:9b:16:92:51:8f:17:df:7a:01:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: Jun 14 07:01:41 2025 GMT
Not After : Jun 15 07:01:41 2025 GMT
Subject: CN=4fc1ceebdedd16e967f88cfdf758f9306a794b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:1b:37:4a:c7:7c:81:91:70:d4:76:0a:84:
b0:44:79:fd:b7:25:a4:d2:66:7c:89:01:8d:d9:49:
5c:35:b4:b4:3f:f9:5b:c5:56:dd:34:3b:4b:4e:de:
4f:d6:eb:6f:6e:ea:a0:54:5f:65:8b:34:b6:5e:b1:
e5:43:24:92:e2:a3:21:c7:30:5f:da:94:54:63:e5:
ce:9d:01:77:b1:c9:62:e7:b9:c3:3f:8f:6e:fd:39:
01:56:18:d1:39:e0:a4:f5:69:d3:94:a0:49:b8:a2:
16:fe:7e:8e:2c:62:00:d7:33:bf:65:a2:b8:c5:3e:
00:17:be:9e:78:e3:04:20:f9:b3:3f:0f:ae:15:9b:
d0:cf:f4:c0:e1:53:3e:4f:d2:ec:8f:e6:5b:8a:e7:
65:41:ca:6e:33:44:a9:93:60:b4:2e:b8:6f:b8:2f:
60:3c:7c:b2:66:be:87:ee:64:4c:f9:71:54:e8:6b:
ca:93:d1:86:24:a3:16:b8:e4:a0:b4:5e:5b:31:aa:
41:70:f9:90:a2:c1:84:e8:73:a5:55:37:e7:1a:8e:
af:c6:20:e1:56:15:fb:8b:a7:82:42:6e:f2:d6:9a:
a6:68:b5:34:8e:c9:7f:49:58:d5:b1:a5:2d:b7:7f:
35:be:1d:67:80:6d:9d:79:35:bc:ab:4d:c7:8f:26:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:CE:EB:DE:DD:16:E9:67:F8:8C:FD:F7:58:F9:30:6A:79:4B:27
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:8d:a8:5c:4d:97:ed:fa:a6:94:b4:51:07:5f:d8:29:e0:
c3:e4:e2:33:32:31:cb:c2:9d:53:b7:5d:cf:c3:1a:b5:26:e7:
ff:3c:a3:45:02:ab:5e:f6:a7:1e:08:e2:da:ab:3a:ee:3b:e0:
98:a8:aa:94:c2:96:d0:64:3c:fd:6e:7d:3a:28:cb:35:98:16:
7e:38:1d:2b:80:95:e3:16:d0:93:44:5e:07:99:e6:0e:6f:91:
59:11:88:fb:0a:fa:e1:96:c4:ac:23:b1:5a:9e:a7:a5:02:74:
35:8c:ab:3a:81:c4:63:77:92:6e:39:3e:19:12:6c:c9:f6:49:
92:2c:21:21:0c:f1:ce:34:43:3b:43:ea:aa:5b:88:0f:94:0f:
58:49:ae:31:32:9b:fa:1e:2e:4f:48:81:a4:18:7d:fe:72:c4:
0b:bb:e6:b0:ac:04:19:35:0d:08:af:39:3a:01:96:95:7f:02:
1d:6f:82:3e:50:89:48:34:43:6d:e6:07:4d:9a:94:2e:5b:5d:
a7:11:1d:42:66:ff:b2:5e:8e:9a:12:ae:7e:ac:7e:d4:ef:6b:
93:cf:90:27:c5:14:92:bb:16:a6:af:1d:7a:a9:04:d2:a9:45:
75:98:9b:33:c9:04:95:4b:81:52:a9:34:64:c2:89:eb:27:6b:
2e:f3:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:53 2025 by rpki-client