Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: RZw1apn/sORffMy1J2sfrZAefJ3SEpaBD9VI6YmWv80=
Subject key identifier: 10:2C:DF:18:6B:9E:30:6B:E4:29:D4:BE:BB:7D:C7:A3:5B:9C:D7:D8
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 019777F7DB5D779FE667F87808D5B93AB91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0A89
Signing time: Mon 16 Jun 2025 09:00:21 +0000
Manifest this update: Mon 16 Jun 2025 09:00:21 +0000
Manifest next update: Tue 17 Jun 2025 09:00:21 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: epUfDl5pCU4+3Rx5LN7/6Xo6aFXH9IE1rqrr78OBkrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f7:db:5d:77:9f:e6:67:f8:78:08:d5:b9:3a:b9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Jun 16 09:00:21 2025 GMT
Not After : Jun 17 09:00:21 2025 GMT
Subject: CN=102cdf186b9e306be429d4bebb7dc7a35b9cd7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:66:58:ee:63:95:cb:3f:a2:72:73:2a:1d:
19:05:3b:0e:1e:16:2e:5b:2d:f7:eb:0b:16:23:8b:
14:71:3b:92:3a:7c:70:41:6e:88:e1:cd:09:5d:31:
0b:19:af:96:2f:cd:90:46:bc:87:ea:0e:b3:b0:98:
44:a2:b7:55:12:43:65:2e:6f:08:b4:bf:37:b3:51:
ba:e0:02:fe:85:d2:e0:b2:7e:5b:75:05:24:11:94:
ed:4c:d0:bb:b6:66:ef:41:87:80:9f:59:20:2f:99:
d1:3b:b6:16:63:f5:f2:da:1b:4d:49:b4:2f:49:e8:
e9:c2:30:bd:0a:03:be:af:7f:53:9f:59:3d:2f:f3:
98:da:06:7f:8b:68:36:4e:4f:79:ad:40:26:ff:b0:
a8:59:fd:5c:97:9b:c2:ed:7b:29:38:d6:49:1a:fd:
0b:02:9e:30:60:75:db:6b:35:6e:3d:62:b9:b8:23:
f1:74:69:77:40:b7:9d:1e:e4:6c:55:fb:f0:83:11:
9e:44:3d:27:83:5a:c1:8e:19:3b:b0:5a:bb:ad:b4:
4b:62:9b:34:d0:88:72:f2:3a:06:f3:c6:41:04:70:
2c:d0:10:a8:d1:dd:52:bd:21:b7:2e:95:40:12:91:
45:53:ab:3b:30:a6:25:1c:57:34:82:a2:3e:08:89:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:DF:18:6B:9E:30:6B:E4:29:D4:BE:BB:7D:C7:A3:5B:9C:D7:D8
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ee:97:c9:ca:ea:52:c4:d1:ec:c6:60:9c:da:e4:e2:37:6e:
72:63:92:df:4b:20:f9:fc:9a:5f:f3:f6:78:83:68:09:72:d0:
4c:e5:10:ca:a7:fc:e9:2d:4a:4e:ec:35:69:7a:e1:fb:91:c8:
51:14:52:f0:6b:f8:50:de:a5:bd:9a:3b:fd:77:b8:e6:d4:dd:
71:2c:8f:77:d0:e3:da:f7:79:bb:94:d5:73:da:11:b6:de:ac:
c2:8c:11:73:20:5a:d8:c0:45:d9:18:43:3a:ab:58:d1:35:4e:
b5:66:77:1c:d0:bb:ac:71:e1:ee:80:48:3d:62:17:24:92:22:
e2:3f:b9:ec:48:2b:77:a0:b6:27:9b:2a:05:62:3d:f0:46:cf:
66:c9:5e:dd:54:aa:5d:42:b1:f6:8c:db:0e:fd:cb:20:c6:55:
e1:be:a0:d7:c0:d7:72:67:2e:fd:bd:8d:8f:14:1a:46:75:fc:
36:0e:1e:2e:1a:27:a6:84:46:fb:55:7e:c7:ec:ff:d8:d1:ac:
96:e1:f4:27:67:5a:e3:b0:74:f8:3c:88:43:a1:72:75:e6:6d:
ae:9f:8e:3e:ae:f7:97:7b:d0:38:2e:3b:8c:72:a5:c8:0c:c1:
30:b1:02:9b:d1:17:ea:0d:c7:ea:e6:49:1a:22:6e:4c:3c:87:
b9:90:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:23:13 2025 by rpki-client