Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: aSuoHfCepu3etpo/9cA1dbwdwuzSBDRpqRL7O3O26D8=
Subject key identifier: F4:57:34:6C:75:2B:4C:7A:36:13:CF:33:5C:E6:7A:C8:8B:62:45:62
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019849D380190C4C1420EDBC9F4BCC10EBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 03:00:54 +0000
Manifest this update: Sun 27 Jul 2025 03:00:54 +0000
Manifest next update: Mon 28 Jul 2025 03:00:54 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: wkvUGSTGiT6amzSmJ0RViV88AfL7ofYLje3uV5CUSi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:80:19:0c:4c:14:20:ed:bc:9f:4b:cc:10:eb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Jul 27 03:00:54 2025 GMT
Not After : Jul 28 03:00:54 2025 GMT
Subject: CN=f457346c752b4c7a3613cf335ce67ac88b624562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:cd:2a:79:35:ef:46:13:5d:aa:1a:4c:a0:
a0:3a:1b:74:51:56:a8:18:50:cf:54:58:b8:22:53:
f9:05:f6:fb:74:c4:b9:44:ba:04:8c:46:04:ca:7d:
37:79:92:cf:7a:6a:d0:8e:72:f8:68:56:4c:9e:e9:
e0:1a:e7:24:f3:5d:15:e3:d7:6a:9b:a5:87:6b:d5:
1a:47:83:b8:d3:14:3c:dc:bb:e5:3d:f0:ae:a6:ce:
28:b4:00:44:61:eb:5c:65:d7:ae:8f:b4:64:a6:da:
73:2f:1a:85:c6:85:cf:6f:27:7c:a2:5a:03:b8:8b:
ed:39:e1:89:fb:9d:dc:35:2d:0b:e7:de:f1:9d:34:
27:1d:8c:6b:c9:06:89:45:4a:e2:99:2b:aa:c8:70:
e7:57:14:18:72:3a:87:1a:31:ea:ce:6a:e7:ad:5e:
01:07:48:97:9e:d8:b4:a0:99:a1:00:97:7d:ed:cf:
d8:91:b7:66:7d:1c:32:b1:84:d1:21:27:90:4f:5b:
30:67:bf:00:cf:88:1f:cd:8e:d0:50:04:ae:31:fd:
20:f0:38:ca:68:3b:dd:d2:e1:d4:59:88:09:5d:3a:
76:d8:d3:a1:eb:da:ba:bd:55:f8:c9:ba:2c:fe:2d:
13:5a:5e:de:64:d7:43:3d:f2:56:89:bf:d7:40:05:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:34:6C:75:2B:4C:7A:36:13:CF:33:5C:E6:7A:C8:8B:62:45:62
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f0:22:c7:8f:98:75:90:90:fc:d5:c3:31:84:93:41:29:34:
dc:41:5b:bb:c9:f5:16:1b:12:51:b2:85:ee:e3:2f:f4:ac:d6:
22:65:53:f4:e3:ee:5a:dd:9c:fb:95:c8:44:4f:a4:3b:df:d5:
94:70:79:a9:29:84:c3:5a:3d:db:64:ea:be:a7:92:71:61:2f:
7b:e6:3c:8e:a1:90:16:2d:a9:2b:0e:e2:20:1e:30:5a:d6:a5:
51:a4:62:41:54:61:bc:b7:b6:d7:27:48:e4:25:3f:3d:8e:eb:
56:fc:65:8b:d8:53:f4:6a:0d:66:e2:cc:2f:b4:d3:70:8d:9a:
35:6b:65:aa:83:a4:9a:5a:8a:74:92:bc:b0:af:29:eb:c9:6d:
43:68:d0:b9:94:d6:6f:44:70:fc:74:b2:02:11:65:38:93:14:
b0:6c:0d:38:76:8f:31:70:79:bb:8e:2b:d3:d6:ba:17:ab:8a:
f9:0c:28:e1:1d:5b:75:f5:0f:25:6b:7b:16:4b:0f:1f:f8:c9:
82:be:97:72:48:70:f1:26:ce:57:30:a4:90:71:0f:7a:cb:cb:
cb:d4:1b:cd:a0:f2:74:9b:2c:31:74:d8:5c:e5:40:bf:95:7c:
8d:42:4b:e1:a4:f6:a8:22:ab:e0:b3:78:36:24:97:c2:36:57:
6f:0d:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:16 2025 by rpki-client