Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: RhJfZzKRftkyHsh+bQKN5P1j9VQKdeYI7CmS4Yz+fF0=
Subject key identifier: 92:06:00:C8:CB:EB:F6:5A:F2:DC:09:B2:6E:BD:4B:60:42:E3:08:03
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019881680BE9E2A9B7C2B95812CAC322BBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 04AA
Signing time: Wed 06 Aug 2025 22:02:16 +0000
Manifest this update: Wed 06 Aug 2025 22:02:16 +0000
Manifest next update: Thu 07 Aug 2025 22:02:16 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: gUzJQy4RwnfqT7gLIp4JXDT/Tn6c4SkJLFt2ZJ6BhK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:0b:e9:e2:a9:b7:c2:b9:58:12:ca:c3:22:bb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Aug 6 22:02:16 2025 GMT
Not After : Aug 7 22:02:16 2025 GMT
Subject: CN=920600c8cbebf65af2dc09b26ebd4b6042e30803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:16:e8:2c:e0:60:00:d5:9b:39:57:03:89:
b5:e5:54:70:b7:c6:2e:0c:76:32:41:4d:c8:ef:95:
62:24:0b:36:97:e0:00:36:61:35:08:ba:db:8c:31:
b6:ea:2c:22:c0:83:0d:92:c8:eb:39:24:e9:a0:1a:
91:5c:ab:4b:08:c7:dc:4e:54:e7:e7:2c:5d:57:67:
58:14:f2:85:b0:2f:46:90:f1:4b:10:ac:ad:e3:e2:
89:15:7a:4c:ab:25:68:76:2e:1c:49:ab:6b:be:5a:
24:c1:04:1a:a6:80:4f:b3:74:70:00:db:99:b9:c7:
11:02:7f:c1:b2:49:15:e3:1f:d8:a9:8c:bf:34:15:
4b:be:03:02:29:d1:68:5f:21:b8:db:66:62:2e:d2:
9a:fd:92:b6:fc:01:65:f4:8c:89:fb:df:f9:27:15:
e8:de:7c:bb:5b:29:f5:67:49:64:88:5d:ff:1a:e4:
5b:5b:5c:33:22:fb:ce:6a:69:dd:53:a5:69:6b:63:
a0:b0:9d:27:1a:7f:17:cd:20:fa:49:d0:45:b4:82:
8c:bc:50:b4:f3:2a:54:ac:16:2e:86:b5:15:7e:61:
68:53:c2:77:70:04:c1:a4:64:40:93:74:e6:14:35:
64:e3:8d:3c:ad:ea:15:13:0d:cf:b5:74:fa:5a:f0:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:00:C8:CB:EB:F6:5A:F2:DC:09:B2:6E:BD:4B:60:42:E3:08:03
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:35:71:09:cd:88:11:1e:bf:8d:3c:54:7c:c3:4a:26:48:
3c:b0:bf:5d:f2:72:7c:92:15:74:4f:1b:bc:86:3d:ba:14:c1:
61:e2:e9:6a:46:c9:9e:07:cd:ee:a1:19:4c:cb:d9:47:a1:a3:
dd:04:7f:b6:c8:a8:6f:af:cf:75:7c:9a:0c:95:bd:a7:cd:d0:
96:7e:b2:c0:4e:74:36:c4:78:9c:dd:6a:7f:43:fc:9d:a3:24:
8a:39:7b:68:2c:2a:f4:9f:70:49:12:76:c1:dc:fb:39:91:59:
ad:aa:c0:9e:3c:fb:1b:df:8b:41:48:6c:04:eb:f9:ea:ed:e0:
69:45:9b:5e:60:14:92:83:79:37:53:c1:a5:d9:d3:cd:c0:61:
3a:ff:f0:51:8e:d0:8a:b9:b8:77:24:06:02:e9:24:2d:c9:11:
f2:15:c5:c0:bc:86:83:0a:2b:ae:20:41:fb:7d:de:c7:c9:d6:
21:ce:9c:92:fa:ed:55:b6:e0:aa:46:02:18:39:17:36:57:1d:
26:b3:a2:20:50:18:3d:aa:ce:5d:a2:13:20:94:3e:98:88:7f:
f1:ba:70:31:8e:43:1b:cb:b2:32:9e:71:ff:4f:92:86:89:63:
bb:2d:ce:eb:57:a4:0e:40:93:70:b3:b3:8d:95:ce:9e:ab:a1:
90:57:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:23 2025 by rpki-client