Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: p+9Q3DDMImNUPKrnJ2wGs8hYmRJ1rQq0z6u7TuYXJnU=
Subject key identifier: BA:A1:2E:3D:9E:C3:53:FC:FF:07:92:86:03:0A:A4:74:37:61:53:8F
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 01984965CA2F6E5705FB54BC0AB8639C2853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 1301
Signing time: Sun 27 Jul 2025 01:01:04 +0000
Manifest this update: Sun 27 Jul 2025 01:01:04 +0000
Manifest next update: Mon 28 Jul 2025 01:01:04 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: os2cMMxKHv9MQvAxnHatgcZmzoocVyCN/Enig2DFDc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ca:2f:6e:57:05:fb:54:bc:0a:b8:63:9c:28:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Jul 27 01:01:04 2025 GMT
Not After : Jul 28 01:01:04 2025 GMT
Subject: CN=baa12e3d9ec353fcff079286030aa4743761538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:b8:15:eb:bc:82:c1:ae:9e:c1:97:83:8f:
68:6f:1a:45:ac:40:9e:2d:82:e0:0f:4a:d7:50:ad:
0a:09:17:e6:b6:2d:34:aa:44:d3:9a:ae:14:bc:db:
f0:ca:9d:d3:33:41:78:d3:0c:a7:ed:c3:ec:81:39:
e3:d0:7e:8d:8a:47:da:86:6d:58:61:0a:72:84:4f:
89:bf:68:60:3f:93:3a:e0:1e:97:28:25:f3:ba:49:
32:74:2b:4a:bb:5c:9e:ef:0b:45:29:96:a7:94:72:
94:82:6c:53:15:96:7e:17:69:74:07:97:10:10:f7:
62:3a:7c:30:aa:6f:de:d9:9c:d1:b1:d5:f7:35:8e:
3c:bf:ae:7c:17:d0:4f:5b:9e:1b:61:77:3b:b2:07:
8f:51:ac:21:1b:82:4f:94:2a:6c:ae:cb:29:13:30:
dd:6f:52:40:a4:26:8d:99:5a:0a:9b:04:15:dc:4c:
ce:fa:76:5e:63:71:03:90:f4:44:b8:fc:21:c1:2e:
ef:56:55:0c:23:5d:76:98:d7:bc:4a:26:8b:ff:d4:
3e:2f:32:01:5e:b2:66:72:ea:e0:b4:93:68:3b:c8:
6f:ca:2a:a7:42:c1:ac:91:ac:90:72:8c:16:88:eb:
34:20:4a:1a:69:34:1d:a7:d6:5c:d5:ca:03:c3:0b:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:2E:3D:9E:C3:53:FC:FF:07:92:86:03:0A:A4:74:37:61:53:8F
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:9b:e1:bc:6c:55:85:f4:56:7c:5c:f6:fc:0e:17:70:a0:
36:47:df:d2:8d:c4:24:f8:8f:8d:49:b6:a0:9d:c7:6b:dc:30:
30:45:f8:32:c8:23:80:f4:e9:f2:82:99:25:d5:31:93:a1:07:
18:58:4a:33:5c:c5:f1:57:84:5e:08:9f:57:5f:e8:0c:fe:f1:
6d:d6:53:df:3e:87:48:31:0d:c1:8f:71:ee:e8:29:32:79:37:
8c:7a:7a:dd:df:8d:a3:58:53:d4:c6:22:09:44:17:69:97:30:
e6:c6:e7:f5:d7:55:e1:ec:70:1a:b3:3a:bb:a2:ef:db:07:70:
d1:e2:46:d6:4a:52:32:33:4f:05:52:0f:5a:6d:6b:c8:92:66:
11:b6:7e:ca:22:13:20:ea:ae:18:b6:9b:45:6c:b4:d6:7e:41:
fd:30:49:25:95:1d:fd:61:12:df:2b:17:64:bb:76:2c:68:a5:
dd:24:69:7c:5e:da:34:0d:24:1e:da:eb:6a:29:04:41:a3:5e:
02:af:5b:fc:6a:37:1b:b9:19:69:a5:40:2b:39:e6:c1:66:13:
dc:66:9b:f3:c6:24:78:42:e5:df:88:3a:17:66:81:db:9a:4c:
67:05:4e:f7:01:7c:91:d5:27:23:8d:cc:eb:b7:15:97:53:6c:
e0:c7:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:14 2025 by rpki-client