Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: TjsQ9ArcNK/OTQhEikszrX1o+dVSRZ3o1iOSdBA1pXA=
Subject key identifier: 0F:4D:CB:F7:9C:E7:37:AA:1A:20:51:D4:E0:62:FF:56:45:E3:2A:DE
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019895249173107536FF800934269FCFD80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0F4B
Signing time: Sun 10 Aug 2025 18:00:58 +0000
Manifest this update: Sun 10 Aug 2025 18:00:58 +0000
Manifest next update: Mon 11 Aug 2025 18:00:58 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: be9kGThLwZVCfMjLPXEVspBtOToXPa3JVITZx3cLCEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:91:73:10:75:36:ff:80:09:34:26:9f:cf:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Aug 10 18:00:58 2025 GMT
Not After : Aug 11 18:00:58 2025 GMT
Subject: CN=0f4dcbf79ce737aa1a2051d4e062ff5645e32ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:0b:97:76:fc:c9:53:6e:8e:8d:43:bc:c4:
54:ed:5e:ce:ba:53:2d:20:1a:58:ff:6b:3c:73:76:
42:1b:50:c9:7d:41:8d:21:52:a7:a3:80:24:cc:58:
1f:b6:e5:27:05:95:f1:61:29:a9:11:f8:21:2b:a8:
4a:d5:c1:39:71:13:fa:72:2a:30:47:2b:ee:ed:77:
07:ee:08:68:cd:9a:a6:5e:b0:f4:61:f2:a2:be:b2:
1e:cb:5a:6c:29:5c:86:7b:c8:e7:d7:25:7a:b0:2f:
95:97:b6:f5:ad:04:e0:31:85:77:94:40:5b:d0:26:
83:8c:07:df:69:8d:11:ad:87:50:8c:f3:30:4d:b4:
08:48:a4:fc:33:3f:a4:b9:87:b5:a4:8b:54:d5:f6:
3e:70:25:59:51:3a:05:46:07:28:39:98:b9:25:c2:
4a:2e:a8:63:e3:15:89:b6:4d:34:36:c6:8a:a8:d3:
56:f4:7e:1c:27:a0:e8:4e:46:29:0d:26:da:ae:b2:
23:df:d2:10:6f:51:19:6a:99:9c:c8:0e:96:36:4a:
e3:e3:57:22:25:3d:b3:3e:dd:97:41:3c:e7:66:05:
bc:1e:86:29:91:7a:8b:82:42:6b:d1:16:d1:8d:79:
31:75:88:8f:85:06:27:9b:03:d1:82:1e:5e:70:1f:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:CB:F7:9C:E7:37:AA:1A:20:51:D4:E0:62:FF:56:45:E3:2A:DE
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:ca:f6:17:46:ca:69:8e:3b:36:c9:65:0c:16:17:2a:d4:
5d:05:b3:2d:f4:b3:a4:43:7b:e9:80:00:81:4e:1d:c3:18:45:
75:70:a7:15:91:b4:54:9a:43:58:75:67:7a:38:8b:46:5a:d5:
0d:b1:ec:5a:22:7c:8b:cd:51:7e:98:ce:a8:89:51:2d:52:46:
69:2a:ab:12:f3:45:f1:5c:19:fb:08:9a:df:2b:0b:1b:30:5b:
01:7e:53:8d:7f:65:95:4a:29:67:f8:ac:ac:b6:40:03:41:2b:
32:cb:33:cc:7d:cc:01:90:af:87:d9:5f:91:f7:6d:e9:7d:a0:
98:26:0f:37:37:26:29:26:f9:86:6c:92:14:c7:98:ad:f6:31:
69:de:40:fd:9c:0a:e5:f1:37:cb:98:6c:94:7d:aa:68:1e:24:
7c:34:36:67:0c:f3:94:41:c2:ea:6a:84:57:bc:3e:0c:68:9b:
8a:60:1e:38:38:8f:c5:b5:70:5c:05:88:14:f6:cd:5b:33:1f:
4e:06:c8:fe:6d:1a:c8:06:88:85:ab:23:92:6c:55:a0:82:2e:
7a:3f:43:7f:84:05:ff:82:6b:87:63:d0:15:b6:8f:b3:cf:5e:
3f:c2:a6:32:50:c1:b0:09:65:13:d7:9d:b4:ae:05:8a:b5:2e:
2a:44:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:44 2025 by rpki-client