Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: /L52ZaIpyzmcy+ND5F0z/DwdbeQQh7Nzm+2BzICyK6I=
Subject key identifier: 2B:CC:EF:13:2D:30:61:C6:BE:3F:F3:E3:02:DF:D6:CB:56:5E:70:DE
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 01976DABF77C29491F362C3683D094EC9CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: eP7lqZM1qzBo16QgPGndC8guSZ3SPX1Cr3jJiZfAx+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f7:7c:29:49:1f:36:2c:36:83:d0:94:ec:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=2bccef132d3061c6be3ff3e302dfd6cb565e70de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:07:2d:1e:23:d9:af:59:e7:08:3f:e7:8b:
4d:68:5e:25:a9:d6:78:35:bd:cb:e4:cc:8d:c4:44:
7b:58:d8:4c:1f:a7:da:95:ea:eb:80:4f:38:94:e9:
4d:ff:97:a6:83:e3:23:bd:9b:b6:03:d2:87:a1:82:
a0:22:7a:5e:aa:1d:14:aa:5c:1a:d5:99:6b:1d:21:
93:8b:63:0f:5a:b8:09:9b:dc:02:bd:ad:5a:36:87:
f0:6e:b2:65:dc:ad:b4:8f:82:b1:27:f2:1d:ca:1d:
bb:df:46:16:ec:3b:cd:ac:88:ed:3e:44:2a:6f:d0:
4c:8c:2d:13:ed:9f:54:3f:dd:b6:5f:4a:83:ae:46:
55:8a:b4:78:32:5a:0f:6f:47:1a:be:3a:71:a8:a7:
18:da:f3:4c:9b:39:b0:b1:a7:3d:80:ca:06:45:42:
43:af:e1:36:b6:61:b9:0e:d3:56:5c:19:d6:2e:ea:
af:70:13:ec:37:47:05:cb:4f:ba:b5:42:73:9c:a9:
41:fb:f4:85:2c:06:47:28:e0:0e:f9:eb:04:d3:24:
09:17:1a:3c:c2:de:4d:ae:20:bd:53:62:eb:2e:94:
7e:36:ff:c7:65:32:78:8e:4e:bd:d9:a5:4e:5a:40:
16:5d:8e:e6:09:8f:dc:77:1a:f5:11:4e:cf:47:9a:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:EF:13:2D:30:61:C6:BE:3F:F3:E3:02:DF:D6:CB:56:5E:70:DE
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0e:a7:ab:32:74:e5:7c:83:55:53:79:a2:1d:34:78:be:b6:
52:7e:cc:11:9a:ef:17:75:bd:51:90:22:a9:ff:6c:b6:24:ff:
52:68:22:2a:88:fb:6a:5a:b0:79:48:73:94:bc:cd:db:d8:41:
71:8e:e0:b1:10:96:dd:9b:e6:5d:0f:29:42:8c:cd:73:be:96:
9f:6f:f7:01:2f:1e:50:50:b4:3e:ce:7e:46:a1:1b:74:a6:d3:
c5:3f:01:85:74:1c:14:d9:08:fb:a3:d0:54:15:e7:cc:a5:c2:
dd:5a:18:4f:0c:b9:25:92:ac:eb:a3:c6:06:18:14:72:c8:c4:
47:8a:0d:4c:db:8f:d0:3a:3d:f3:46:b5:f3:ee:ff:8c:a2:6f:
69:cc:73:fc:a8:28:49:3e:80:2f:17:92:b4:c6:a0:a9:62:eb:
b6:42:e2:d7:3c:17:9f:e9:af:25:d4:e9:3b:5e:39:92:3d:bf:
7e:f9:1b:e1:db:54:62:70:bd:ca:a4:a1:c5:fd:4b:fa:17:0d:
11:21:3d:48:ce:3b:47:12:33:bc:11:e4:4d:a0:ac:28:9d:62:
d3:b5:29:84:03:8e:41:55:85:7e:5b:e6:7b:dd:43:1c:17:06:
a8:33:e0:b1:7c:2f:d1:63:0d:7c:1c:f4:4d:9c:00:ba:5f:67:
b5:4d:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:19 2025 by rpki-client