Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: 5W85lKSbHXZrNjdBe0/bjp3aKczo5ZgQ87w7SXPYbDE=
Subject key identifier: 19:1D:63:0F:9F:51:A7:7F:EF:4A:88:10:52:91:42:00:F0:7F:D2:07
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01984A0A75931173A01D9EFD91A6DB9461FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 8A
Signing time: Sun 27 Jul 2025 04:00:56 +0000
Manifest this update: Sun 27 Jul 2025 04:00:56 +0000
Manifest next update: Mon 28 Jul 2025 04:00:56 +0000
Files and hashes: 1: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: qLTXJdz1mWJtOPDvl4Zd2aQQlTQW7XVkamSaqr7JzrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:75:93:11:73:a0:1d:9e:fd:91:a6:db:94:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jul 27 04:00:56 2025 GMT
Not After : Jul 28 04:00:56 2025 GMT
Subject: CN=191d630f9f51a77fef4a881052914200f07fd207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:d7:fd:41:0b:e3:7b:f3:09:42:6d:8d:4b:
3d:71:a0:7b:12:50:b1:d5:9d:70:d7:70:ff:69:09:
91:a0:79:95:31:07:b0:85:b6:9e:85:00:17:bc:19:
15:1c:c5:9a:a8:34:45:2d:00:78:2d:2c:54:d7:c1:
6f:24:07:f1:eb:64:22:59:75:81:0c:75:90:7f:6f:
8d:3e:a9:f1:99:5a:3b:05:f7:f4:93:90:a8:50:f1:
11:6e:e0:2d:69:16:f4:a2:a6:02:14:77:4e:7e:ae:
f9:38:62:d8:08:cc:e4:ff:9b:e3:20:86:12:a5:ae:
6b:4b:20:a3:87:81:24:60:f9:dd:90:f7:9f:bc:08:
96:37:4b:a1:54:6a:d1:ad:1f:81:30:e7:ac:30:b0:
eb:80:19:50:81:df:15:92:39:dc:9a:7a:ac:00:3c:
73:f4:ae:ec:22:ea:d4:75:a7:43:c4:da:7c:d3:5a:
f4:7a:09:9b:69:c0:37:aa:bb:6e:cf:42:71:e4:4a:
c4:99:b2:82:19:f0:a9:90:45:1f:d8:cc:e4:e6:04:
e3:a7:29:6a:24:63:70:b3:1e:76:0f:63:6b:ca:46:
d2:83:65:9a:53:67:a4:ae:e1:3a:94:cb:09:a4:0b:
f9:82:93:31:3c:96:b3:88:54:e9:12:4d:67:3e:73:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:63:0F:9F:51:A7:7F:EF:4A:88:10:52:91:42:00:F0:7F:D2:07
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:fd:6b:26:7d:5f:40:35:4e:2d:22:37:d6:b0:cf:b9:47:
ba:b5:fd:49:d3:1d:59:1b:4b:a6:c5:f0:67:d8:5b:8d:9c:35:
4b:f1:b8:9a:77:e2:51:f4:0a:db:67:2f:e1:3a:d5:94:5b:65:
6c:e2:92:c4:17:5b:30:97:ca:29:1f:16:c7:76:1c:0b:ca:f0:
2f:4f:18:03:ac:66:9a:d7:1c:39:1a:67:d5:07:b5:5c:b3:bb:
10:52:cb:9a:99:09:ed:7a:be:ac:c0:0e:78:d1:24:5f:96:71:
4c:0a:a0:10:b5:e5:2c:89:54:b8:0f:51:68:55:44:76:da:51:
9f:bb:56:a1:1c:52:d3:7d:b9:2b:fb:6c:24:97:70:ce:05:de:
2f:bf:48:21:53:27:28:36:95:3c:83:78:fc:68:9b:48:93:db:
75:11:3b:dc:02:29:69:77:65:3b:8b:88:45:20:c1:f1:58:56:
e8:75:8a:e8:26:f3:41:51:a6:ca:41:75:0c:31:e1:d0:f2:63:
cf:dc:84:0a:e0:a7:5f:a3:2c:5f:c0:c0:9e:3a:01:28:cf:cc:
f8:91:7a:99:3a:b6:ce:fe:39:d5:89:05:a8:48:bf:f9:5d:f0:
8f:5e:a4:3d:1c:69:8a:cc:30:2c:c6:96:8c:ca:79:00:0b:35:
56:fd:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:28 2025 by rpki-client