Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: PAkXefWUyHVqPzb4kHjj/pLNdUxH6Xq4fMHVj7OUA9Q=
Subject key identifier: A1:BD:5F:98:E8:A5:AA:E4:67:44:24:2B:4D:2D:A7:B5:51:BF:40:5D
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 019879E421AC7C6BB1CD5AC0D7E25717F1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 0276
Signing time: Tue 05 Aug 2025 11:00:50 +0000
Manifest this update: Tue 05 Aug 2025 11:00:50 +0000
Manifest next update: Wed 06 Aug 2025 11:00:50 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: WUGJHhNVbxv7fShr3KcP3I3OUhz31jfqVoazShTBnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:21:ac:7c:6b:b1:cd:5a:c0:d7:e2:57:17:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Aug 5 11:00:50 2025 GMT
Not After : Aug 6 11:00:50 2025 GMT
Subject: CN=a1bd5f98e8a5aae46744242b4d2da7b551bf405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:c2:ef:bd:6c:02:c7:29:9f:25:97:53:a0:
0b:4b:3a:96:85:f7:c6:d5:a9:12:dd:07:4c:6e:c8:
64:91:87:16:99:0b:ec:19:8b:d6:54:2e:f7:b4:e3:
0c:28:ce:cc:1a:9f:d7:c6:d2:b9:52:a1:d9:d2:75:
26:5a:de:7e:cf:69:9f:fa:cd:7d:89:f6:39:c4:5c:
4e:62:48:71:ae:4a:ee:71:15:77:5e:f6:49:8a:c7:
e4:d5:39:0c:64:14:0f:33:73:a9:6c:e3:aa:19:c0:
76:c2:c2:56:b7:f7:1b:6f:59:7d:3c:06:8d:ec:75:
e4:99:ff:75:0f:5a:ab:9d:34:d6:fa:97:3d:08:9b:
a1:43:5c:ec:79:a3:f4:fd:d4:15:27:cb:e2:f1:a2:
2a:f2:47:75:18:9e:e7:5e:20:30:5e:2f:c3:61:9a:
ee:d8:9b:3a:04:47:6c:64:1a:ed:93:2b:52:a3:26:
53:a5:60:2b:63:e7:08:c6:34:4d:bf:c7:00:4d:ad:
6a:f9:2e:ea:a0:2c:9f:d2:31:4e:31:15:04:e2:62:
54:f9:eb:80:09:d4:61:eb:ff:51:82:bf:0c:00:04:
56:2e:68:36:9c:ee:98:af:fa:25:ed:d6:39:29:d7:
60:58:f2:05:ab:7c:22:24:ab:3f:d9:88:69:c2:91:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:5F:98:E8:A5:AA:E4:67:44:24:2B:4D:2D:A7:B5:51:BF:40:5D
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:8f:ba:b1:4c:f8:bf:be:98:17:a7:7a:ed:a7:a6:24:26:
99:f2:32:8f:7f:8c:4f:77:45:8f:53:15:50:c8:ac:a3:95:b4:
b8:85:e7:32:a0:4a:6e:af:fb:35:04:c0:28:64:53:e3:bf:77:
4a:c6:a3:f6:93:08:19:0d:43:17:4c:5a:77:34:de:4d:b7:ac:
f1:52:b1:13:14:f2:8c:6c:3e:0f:af:6d:92:f9:19:20:39:5f:
89:42:61:f0:53:ae:61:37:d8:d0:2f:27:ba:53:79:ea:62:77:
1b:cd:1e:dc:eb:b7:05:48:60:8a:eb:49:a6:69:88:6d:47:37:
89:0b:30:42:3f:9e:bd:f0:61:d3:9b:73:c9:59:4f:99:d9:50:
cb:73:6c:fb:58:87:6c:41:88:d9:5f:a5:84:ec:b5:64:03:8b:
c1:19:2c:b4:0c:56:07:01:10:cb:2e:b2:70:44:2c:66:b8:ed:
d0:b7:ac:6a:02:c8:2c:cd:13:c7:ef:b5:f2:f7:db:72:05:6f:
e1:9b:c2:59:d3:d5:c4:9b:8d:33:33:02:c2:83:38:a0:3c:6e:
82:0c:5f:24:92:1d:f8:f4:22:3c:68:a0:a6:2e:30:5d:c9:76:
32:12:1d:56:08:87:fa:5d:16:0d:ea:83:67:9a:ea:93:44:1f:
a8:21:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:17 2025 by rpki-client