Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: UpSckaTTvUeUmdBqlodd2siu88i4fnpchMlw/C0P9FU=
Subject key identifier: 79:3B:62:8C:5F:4F:E9:2A:35:8D:49:BA:68:1F:5F:22:4E:0D:0C:72
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 01984A0A0255CD05F28EF1F25EF0B5B9C74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 0518
Signing time: Sun 27 Jul 2025 04:00:26 +0000
Manifest this update: Sun 27 Jul 2025 04:00:26 +0000
Manifest next update: Mon 28 Jul 2025 04:00:26 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: Mrmc6o6zthQ+nKv8iKwaO9LW2bXCjD4mSageT/v1K6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:02:55:cd:05:f2:8e:f1:f2:5e:f0:b5:b9:c7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Jul 27 04:00:26 2025 GMT
Not After : Jul 28 04:00:26 2025 GMT
Subject: CN=793b628c5f4fe92a358d49ba681f5f224e0d0c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:e9:d5:20:63:9f:d5:19:a7:e6:d1:72:69:
b3:4f:58:20:e9:f7:d0:b3:86:71:29:11:9d:08:87:
be:9e:40:a1:9c:1b:51:60:ae:35:9e:68:c8:08:08:
f6:d6:8c:c4:dd:a8:e4:78:95:fc:0e:1a:9a:5f:bb:
1d:f8:9d:c4:81:b2:d8:5a:f8:d3:5d:61:21:87:ae:
77:6d:3f:ac:d2:c8:81:39:b2:22:dc:bd:26:01:c3:
88:07:f7:19:7e:8e:7d:0e:86:f7:a9:d0:ad:61:18:
80:58:39:97:b6:21:77:ae:3f:51:fd:3b:0e:47:bf:
4a:57:36:34:5d:73:8c:9c:58:d0:16:05:f3:f9:1d:
bb:3e:7a:80:27:12:22:e2:9c:e0:27:cf:2a:02:99:
13:27:27:37:e9:eb:7b:69:ae:86:8c:a0:37:a0:ec:
b3:d4:46:27:03:78:c9:d9:79:dd:25:44:27:74:09:
77:9d:38:2f:30:fa:1f:dc:ba:31:72:20:4b:9a:41:
68:cc:7f:57:6f:13:cd:8b:57:73:b7:35:52:67:ca:
41:81:08:3f:bf:3c:88:4c:72:5f:ba:85:20:ad:7d:
db:01:08:16:7d:99:0c:73:28:06:cf:1d:19:83:51:
61:6c:91:52:56:eb:fa:e0:22:16:b1:f3:17:03:4c:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3B:62:8C:5F:4F:E9:2A:35:8D:49:BA:68:1F:5F:22:4E:0D:0C:72
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:90:59:b0:49:24:1c:62:99:1b:01:ec:6a:77:01:cf:7f:
b9:b0:81:5b:68:1a:80:16:03:37:95:42:9a:b2:17:6e:41:fa:
45:1a:b9:fd:79:bd:31:ad:58:20:2f:46:29:5a:41:96:7c:73:
57:0e:ae:c4:21:e1:e5:25:f6:99:b3:5f:55:f4:c6:4e:f3:c5:
f2:a0:c9:5a:4a:29:5f:16:09:92:68:09:36:60:0f:83:f7:23:
bf:d9:6e:77:9c:a1:5a:86:30:13:ef:94:56:b7:e0:ec:ed:bd:
e2:a3:cc:41:8a:4e:c5:4c:1f:85:13:10:d8:62:ef:54:44:12:
c4:72:aa:18:d7:df:03:74:72:1f:81:b1:08:40:e2:e7:ac:b1:
c6:58:81:55:27:a1:9c:4d:14:4a:52:85:51:fb:f6:33:7f:90:
4d:a1:b7:de:6e:db:9a:e8:b9:f7:a4:11:51:cb:26:f8:05:da:
e9:9f:a5:da:73:8d:a8:48:72:bb:f3:f5:42:49:6d:5e:58:41:
61:d1:43:e8:5e:27:1b:e7:86:d2:c9:fe:1c:e6:a5:05:f8:ed:
91:1c:04:55:b8:42:91:d6:95:25:ff:13:6a:1c:86:66:62:61:
8e:4c:9d:7d:93:ca:08:0f:03:cd:05:f5:54:b2:4b:c6:99:74:
4c:b6:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:02 2025 by rpki-client