Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: WR3nVCYXCpjajl++Hz5xVotrMgf9Jxh/5PZRVmK0760=
Subject key identifier: 9F:EC:F2:48:81:C3:B5:02:FE:C8:8B:F1:FD:95:10:FF:21:4A:E4:02
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 01976F2C58391FE57E276E7437D3E5262C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 041C
Signing time: Sat 14 Jun 2025 16:01:06 +0000
Manifest this update: Sat 14 Jun 2025 16:01:06 +0000
Manifest next update: Sun 15 Jun 2025 16:01:06 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: 60txLsrlKo7D62UMx5/o0UbKXWHJUW1qmuWmZFTgLDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:58:39:1f:e5:7e:27:6e:74:37:d3:e5:26:2c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Jun 14 16:01:06 2025 GMT
Not After : Jun 15 16:01:06 2025 GMT
Subject: CN=9fecf24881c3b502fec88bf1fd9510ff214ae402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:d5:46:82:ec:03:13:4f:85:3d:f6:b7:ec:
6e:40:65:a2:6d:65:cd:3d:22:00:f0:92:a3:ef:7c:
75:61:ef:0c:3e:31:6b:60:7e:42:4e:45:06:61:36:
25:ce:3c:a5:e1:05:39:2e:71:6a:f3:3a:f7:15:90:
dc:e1:4f:83:0f:e1:58:f0:66:2c:83:b3:f8:14:82:
40:10:e8:fa:b9:2f:b9:29:ab:95:88:fb:a6:e6:e4:
71:c4:ca:a3:5a:4f:ba:a7:d8:77:ee:ca:56:45:a2:
91:87:62:7c:fa:91:0c:60:00:34:22:06:87:57:dc:
ee:12:7c:20:97:15:5b:2d:aa:bc:67:cd:2b:86:e8:
0c:f3:e3:09:9e:ce:df:99:ac:f8:81:e0:e4:90:33:
a8:cf:85:2c:a4:e0:92:72:b4:87:8b:11:ff:0b:cc:
60:31:e3:b6:92:2d:14:39:79:f1:fb:2b:f5:19:21:
4d:c1:e3:86:dd:92:0b:a5:71:31:c2:c2:5d:eb:e0:
f4:db:f2:6e:53:a2:52:b2:3f:68:d8:f8:7e:85:ef:
55:f2:00:06:ad:b5:91:d2:aa:fa:aa:51:3c:9d:ec:
b3:ff:66:9e:60:04:52:fd:f4:25:01:fd:dd:2b:64:
83:e7:68:07:31:f4:c2:85:a9:ef:4b:d7:e5:05:d3:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:F2:48:81:C3:B5:02:FE:C8:8B:F1:FD:95:10:FF:21:4A:E4:02
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6c:f2:15:3e:30:fc:1b:31:1e:9f:8e:7d:dd:ec:4a:3c:45:
7a:38:59:b9:f3:90:52:e2:48:b8:0e:e6:14:19:b9:a4:b1:38:
67:ed:7e:a5:62:55:4d:dd:c6:4c:1a:3d:95:d3:b5:23:48:4b:
41:0f:47:78:b9:c4:8a:1b:ab:64:a8:a3:d0:30:99:0c:e8:19:
92:86:8b:8b:4a:0b:86:d4:b8:28:0b:f3:fc:a6:ce:3f:69:f6:
31:15:4f:45:4d:28:6b:f5:83:a1:e9:dd:34:21:eb:5b:c7:00:
82:a2:4e:f0:fb:89:f5:a6:f6:9c:18:42:27:c9:54:c9:72:cd:
fe:bf:60:ee:ca:3e:c3:e7:f3:c0:36:b8:d3:23:5e:81:eb:0b:
58:b7:f4:f5:43:98:0b:94:6b:30:44:9b:d4:6f:a3:10:3c:5f:
0e:9e:4d:fc:08:1f:3d:11:8a:d9:b8:81:d9:57:d7:f8:99:b3:
8b:0f:d3:28:22:47:b1:26:cd:e2:00:5c:3c:04:1f:23:7f:2e:
5f:14:eb:c8:fd:b7:22:61:ec:ec:10:7b:cf:df:16:bf:de:f5:
6a:4d:ba:0e:ed:42:84:3c:45:ee:9c:dd:8f:56:b9:8d:52:bd:
5d:2a:10:30:64:5d:eb:45:e5:d8:8b:f3:26:18:26:6b:3a:a3:
42:67:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:44:53 2025 by rpki-client