Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: V9Yl01M2ImGDtFg9dTiN34wQ+SLEXmhi/Tmtv8NncbU=
Subject key identifier: AB:12:CF:2A:2A:49:81:3D:CF:7C:42:3C:19:E2:87:E4:5C:4D:1C:C0
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 01984965E86994ADA59D53076FC3CEF8CC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1488
Signing time: Sun 27 Jul 2025 01:01:12 +0000
Manifest this update: Sun 27 Jul 2025 01:01:12 +0000
Manifest next update: Mon 28 Jul 2025 01:01:12 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: YCNbQrXSu/AYptt7x23cBiJ340fKBICUo6S1V/SwIaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e8:69:94:ad:a5:9d:53:07:6f:c3:ce:f8:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Jul 27 01:01:12 2025 GMT
Not After : Jul 28 01:01:12 2025 GMT
Subject: CN=ab12cf2a2a49813dcf7c423c19e287e45c4d1cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:9f:0c:c7:da:3c:04:cc:e9:1c:05:07:bf:
87:b8:d0:a8:b4:1a:12:c2:50:37:bf:76:a5:a5:a2:
4d:81:01:56:db:b8:f6:ad:25:f9:58:ef:da:a6:5b:
d2:be:98:e6:29:df:15:fd:c4:ec:50:32:aa:46:81:
d9:7d:2d:44:69:1a:eb:4e:91:be:f7:3a:78:85:3c:
e5:21:eb:1a:2a:7c:5b:6f:25:14:c3:94:1d:d1:2a:
e2:ee:a2:60:36:81:0a:b1:aa:bb:78:33:c4:e2:cb:
91:18:b9:ea:87:54:bf:22:3e:e0:72:95:9b:9f:c4:
a5:f4:02:d0:0e:9a:a6:36:18:7d:26:cc:15:f2:47:
cb:b0:98:fc:79:ba:6d:de:3d:61:c3:30:0e:2f:c1:
f0:32:6f:bd:c9:81:ac:9e:37:f5:0a:dd:91:53:09:
12:9c:46:b5:aa:87:26:10:0d:45:8c:b7:4d:33:54:
8b:cd:6c:a2:7a:76:ae:54:5d:33:33:4c:35:32:ec:
66:13:22:b1:23:dc:48:e5:3a:22:f8:93:74:88:68:
f5:cf:aa:66:cf:db:93:5d:cd:e6:f5:17:59:28:92:
fe:a0:6e:02:44:0f:d1:e1:db:f4:e8:0f:6e:e1:b8:
3d:ff:44:c5:13:4f:f8:ff:3a:7e:b7:11:fa:58:80:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:CF:2A:2A:49:81:3D:CF:7C:42:3C:19:E2:87:E4:5C:4D:1C:C0
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d2:7d:8a:ec:84:fb:b5:ab:6b:30:88:fa:87:8c:6b:94:04:
db:3e:bc:76:a9:63:dd:52:f4:c2:ed:45:73:e8:d2:0f:bc:ec:
5a:8a:c6:6b:8e:64:41:97:f2:0c:ca:99:50:29:1a:e7:14:9b:
9b:b5:55:2b:f7:0c:17:5b:d9:f9:7e:f6:e5:96:b3:0a:e7:21:
c8:4d:36:4d:ab:00:10:4a:6a:6f:e5:d6:31:9b:1b:9d:8c:2c:
c7:54:d6:df:a5:67:c5:a4:5a:fa:6a:93:05:fd:ce:b8:6a:23:
c5:76:af:fc:68:73:5e:16:b4:48:b1:34:2c:9a:1f:77:b9:9f:
b5:9b:a9:06:0d:6d:00:ad:5d:be:da:3c:06:bc:b6:ef:25:66:
70:f0:c9:de:ca:88:67:53:46:63:bf:0f:96:bc:cf:8f:3c:a1:
28:c9:0e:c4:91:b6:1d:64:72:8a:1c:2a:fd:ac:28:5c:e5:57:
11:30:51:cd:24:2b:f1:41:d5:1b:0d:f3:77:58:fd:63:6b:d1:
87:e5:1c:ea:50:61:43:ea:87:ac:5e:3e:4e:2b:f7:4a:0b:fb:
4d:d0:61:9b:39:1b:64:96:b7:e1:99:64:72:2c:f0:6b:81:07:
ed:7b:98:e4:67:41:43:d0:b3:96:9d:41:ae:ad:b2:a8:42:b1:
fe:bb:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:52 2025 by rpki-client