Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: CDD4ArgdXWQQ7AziWvU5o6deLpEvbhU8OEJDTYDwtGI=
Subject key identifier: 77:FC:83:8F:8C:56:4F:58:7A:72:7B:E7:39:C8:9E:D2:BE:D7:68:C3
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 019874874D2A916F40C662A447DCFF14FF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 11E7
Signing time: Mon 04 Aug 2025 10:01:20 +0000
Manifest this update: Mon 04 Aug 2025 10:01:20 +0000
Manifest next update: Tue 05 Aug 2025 10:01:20 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: +NNsG+xmK4xHiB1+1qblyXXm6bQBla89IdefI10RTy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:4d:2a:91:6f:40:c6:62:a4:47:dc:ff:14:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Aug 4 10:01:20 2025 GMT
Not After : Aug 5 10:01:20 2025 GMT
Subject: CN=77fc838f8c564f587a727be739c89ed2bed768c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:bd:d8:fe:0d:2c:e4:67:cd:80:11:2d:d8:
2a:31:ed:12:f4:d0:62:cc:b1:42:1e:75:94:e0:3f:
32:78:a3:2e:57:dd:0a:14:f0:0f:18:15:54:7f:13:
64:ce:d6:24:15:2a:d8:3e:63:7c:9a:a2:5b:0c:50:
6f:38:37:b3:da:77:36:80:f6:60:85:d3:0f:ad:62:
d4:9e:3f:49:54:72:d7:03:43:65:bd:a5:e6:8d:84:
6d:ce:cd:98:95:be:7a:96:3f:ef:41:ea:39:dd:67:
22:2d:e9:31:cc:ff:3c:23:d0:f5:4b:f2:58:59:4f:
d9:ab:d5:e0:de:85:60:14:11:32:3f:e8:6f:04:8f:
5a:16:8f:d9:c4:32:20:fe:b1:61:a4:92:ef:6c:3f:
d7:33:35:7a:49:e8:c8:38:2b:a7:29:9f:a4:1c:12:
16:4b:02:d6:b9:ae:53:2e:b6:c0:94:0b:70:de:f6:
ac:e4:c0:71:6f:dc:07:f3:5c:a0:1e:7d:e3:73:de:
f5:78:31:af:bd:8c:14:fb:a9:4e:53:ab:9e:44:1e:
3b:f3:29:29:3a:f5:67:10:6c:f3:b6:ab:c4:ed:57:
af:48:02:49:da:c6:3d:90:94:ce:ed:61:e3:60:77:
0d:93:a0:bd:99:24:73:1f:60:dc:17:b2:bf:5d:76:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:83:8F:8C:56:4F:58:7A:72:7B:E7:39:C8:9E:D2:BE:D7:68:C3
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f0:e8:c2:62:ac:5e:bc:3b:27:67:f8:ac:42:89:7d:ef:8e:
ea:62:e1:f0:f5:07:de:40:05:ba:08:4d:e9:11:48:de:84:f9:
bd:4f:69:05:eb:d1:4e:03:5e:6e:ed:d1:6c:ca:97:a9:a7:a8:
86:87:d3:03:73:2d:c6:a1:e7:af:ba:6d:d0:95:5f:c1:7a:67:
3d:4f:09:6a:0d:c8:8e:40:46:81:53:2a:5b:49:07:06:dc:c0:
eb:06:cf:5b:c5:4d:18:51:0c:ec:70:39:8c:15:6d:69:bb:63:
09:fa:3a:40:f7:1d:51:e9:cf:f9:75:63:8f:bf:8c:b1:8e:a7:
c6:8b:43:17:a5:95:16:b1:b7:92:b9:bd:13:41:61:57:92:0a:
62:1a:8b:81:8a:00:6f:06:65:e9:3b:ce:5c:64:1c:08:36:38:
10:dc:8f:a0:d0:ce:95:46:e3:f5:4b:ec:f1:e1:29:1c:4b:42:
c9:cc:e5:89:61:e5:0f:3d:d9:3e:0d:c6:71:42:7f:68:00:48:
1d:50:c3:24:f0:49:bd:62:11:55:47:0c:e3:22:b1:2f:3e:ef:
50:a5:b4:b8:5a:1d:1d:58:61:44:43:d0:32:86:a3:79:46:1b:
19:a3:8b:97:8b:fd:7b:32:15:d5:26:f5:36:c3:36:ad:79:d9:
7d:77:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:07 2025 by rpki-client