Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: uWvW8qiYs08Eo22o7EsUpcbjpP9z5ScQsYZeAuzCB60=
Subject key identifier: 75:49:A6:7C:B7:F6:69:13:61:E2:89:02:48:F4:66:73:BC:53:49:53
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 01988844E63CB65CCA1EE2E7E21068F02164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0B16
Signing time: Fri 08 Aug 2025 06:01:13 +0000
Manifest this update: Fri 08 Aug 2025 06:01:13 +0000
Manifest next update: Sat 09 Aug 2025 06:01:13 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: XBK3UmVrM/2/cajmGuBOCeOmPVSIgR9uGZLqG91uSE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:e6:3c:b6:5c:ca:1e:e2:e7:e2:10:68:f0:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Aug 8 06:01:13 2025 GMT
Not After : Aug 9 06:01:13 2025 GMT
Subject: CN=7549a67cb7f6691361e2890248f46673bc534953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:db:a7:d3:6d:82:91:28:08:06:37:92:15:
fc:2f:00:fb:95:1d:c4:92:50:5e:e7:cd:a2:4c:ea:
13:f1:35:91:5b:c0:1c:14:74:44:e4:53:3e:0d:1f:
42:bc:95:b0:59:8f:d5:12:23:cf:2c:1f:5e:2d:42:
50:6f:50:5b:df:31:6b:77:95:6d:a7:bc:84:34:3c:
c1:a5:e4:23:f1:06:a1:cb:28:aa:8b:c4:0e:42:15:
e6:69:5d:e2:58:31:7a:a8:e8:8f:a8:f4:49:c4:62:
98:9e:24:24:9f:1c:93:e5:9b:e0:30:1f:7f:43:f7:
c4:27:3d:3a:b7:34:ef:ff:25:52:f9:02:b0:c8:d0:
d7:7b:ff:ef:54:c8:2f:c7:86:67:02:98:36:7c:db:
42:d7:75:9d:12:6e:c3:dd:21:1d:52:b3:e9:62:74:
0a:e9:9b:49:0b:fb:79:1c:3b:70:2a:6e:ed:89:c0:
a3:93:4b:98:15:ad:0b:8b:de:67:7b:c1:c9:5c:19:
97:af:ae:db:b0:5b:91:9c:2c:30:16:d3:df:32:c4:
e0:60:43:26:70:4d:43:b1:c8:db:63:51:b4:73:da:
7e:df:1d:93:cf:bb:4a:67:4b:1b:04:d6:a4:f1:fb:
88:84:34:6e:aa:59:b6:fd:bb:75:41:48:c0:76:aa:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:49:A6:7C:B7:F6:69:13:61:E2:89:02:48:F4:66:73:BC:53:49:53
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:26:35:95:fd:db:d0:b0:80:12:f2:15:18:e1:1f:5f:49:
98:40:0c:75:78:4b:b6:c4:64:0e:93:3d:30:54:d8:44:4c:11:
14:cf:e2:10:ee:a0:11:a7:65:89:cd:76:a3:49:fc:34:a5:dc:
be:03:b2:61:2a:56:ac:8f:ba:2b:49:10:19:1d:d1:96:9b:84:
b8:2e:d3:04:0d:57:f3:47:f6:8e:97:5a:4a:a1:b0:ec:54:46:
5c:c0:a8:1f:1a:e9:f9:b5:ad:c1:1f:af:c6:99:f5:3a:a6:a7:
10:6e:e2:a2:43:d8:ef:1d:64:23:32:fa:f5:22:1a:03:15:73:
cb:2b:8d:fb:19:eb:7d:e2:44:90:a3:09:9f:02:9c:b9:ae:cb:
11:9e:02:8e:29:37:4f:fe:76:92:af:4c:bb:e8:dc:10:fb:ad:
0f:54:2b:79:ab:82:19:c6:9d:6f:a8:5e:b6:b3:46:cf:b5:42:
3a:ee:5f:b5:9a:61:d7:16:46:45:a7:7a:80:1f:e4:7e:1a:76:
aa:d5:73:b6:26:d6:a9:1f:f5:75:23:cb:fe:c4:05:01:3d:be:
ef:a3:47:9b:22:aa:dc:e3:0b:73:38:b9:c9:63:e2:db:98:7e:
e4:aa:26:1e:1a:0d:be:63:0f:6d:11:b8:25:c9:ec:90:42:78:
7d:eb:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:02 2025 by rpki-client