Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: V3TZl4LYb+J9E088HjgC0sbqWfPUgMyszqKw9JkF7LI=
Subject key identifier: F8:28:75:A6:A6:0D:E6:DF:CF:B2:F7:76:12:39:F9:D7:EC:A0:C5:51
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01984AAEDE537ACE6961D9345A82C14FA14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1648
Signing time: Sun 27 Jul 2025 07:00:30 +0000
Manifest this update: Sun 27 Jul 2025 07:00:30 +0000
Manifest next update: Mon 28 Jul 2025 07:00:30 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: 7Uf5wyoArDK4CpAEXPUGjWNubqiDDDA5IX89Dl9JlHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:de:53:7a:ce:69:61:d9:34:5a:82:c1:4f:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jul 27 07:00:30 2025 GMT
Not After : Jul 28 07:00:30 2025 GMT
Subject: CN=f82875a6a60de6dfcfb2f7761239f9d7eca0c551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:31:bd:50:74:0d:14:9d:d7:ab:33:26:c4:
2b:26:e5:06:1b:6a:8a:a7:cb:d9:e9:d7:e5:fa:0d:
05:51:37:19:dc:b6:13:f9:84:37:20:f2:e5:9f:4a:
9b:4e:50:82:66:8b:5c:ba:48:1f:bd:5f:22:38:f2:
c2:23:65:a0:88:07:2d:eb:09:a8:56:20:70:e2:c9:
c2:49:9b:78:71:97:69:73:cc:7e:4a:d5:87:16:de:
19:92:6c:1e:bf:09:70:d4:27:54:ad:e3:86:fd:fc:
e6:4e:4c:fb:01:a7:66:5e:fe:e1:41:06:88:a3:4c:
b0:1e:be:d8:f3:d8:d4:30:17:f1:68:f5:62:1a:7f:
54:8d:5d:53:fb:60:8f:2e:01:86:e6:46:9d:7d:c4:
1b:74:25:10:89:74:b7:19:76:bd:d0:ed:77:ec:13:
65:bf:73:68:6c:fc:0b:94:8d:a2:0b:a5:3c:6e:d2:
81:31:76:c7:72:f3:72:a7:7f:61:16:9c:83:80:13:
35:f4:04:18:45:42:c6:1c:73:f5:50:0f:65:23:f2:
2b:02:db:5f:6f:4e:ee:e7:99:20:50:00:17:ca:35:
2f:77:65:0d:72:5e:94:65:69:a5:a8:d9:fc:29:b8:
c1:55:82:53:dd:79:54:9f:e3:af:a9:fd:a9:08:92:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:75:A6:A6:0D:E6:DF:CF:B2:F7:76:12:39:F9:D7:EC:A0:C5:51
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:e5:ab:e8:e9:ba:09:4c:cf:4e:a0:41:f0:ea:a1:69:22:
45:c2:b7:c5:8f:d1:d2:06:61:11:ba:e3:c0:cb:01:35:80:ca:
49:a9:51:b7:13:d5:9e:cd:c8:55:d8:c4:8c:45:92:9b:68:da:
ce:be:87:f5:4e:2a:3d:72:a0:c5:02:5b:0c:df:93:a8:35:a6:
6f:bc:ca:d9:62:d8:d1:99:c8:92:cf:0c:25:e7:62:f2:c9:e2:
91:14:55:c2:6e:36:92:46:ee:5a:3f:87:9a:2d:ea:02:46:cc:
90:ec:ad:3f:05:03:7c:8a:e9:db:de:ba:57:90:e5:30:04:6e:
3f:ec:33:36:d5:2a:fd:22:25:e6:2e:42:78:d3:bf:3e:70:11:
60:77:48:27:0e:f1:88:f7:0f:95:82:a2:8a:3e:cc:d7:e0:05:
d9:9c:2c:74:07:02:4d:20:4d:eb:e8:8b:cb:b0:9a:eb:b2:06:
ae:88:7c:fa:5e:26:62:73:d6:a2:2f:74:54:63:f3:81:d7:ce:
2d:1a:65:84:78:10:98:4c:4a:bf:dd:bc:ef:f8:7d:5e:49:e5:
f5:8d:19:61:84:4c:c1:5c:29:c8:81:38:8f:54:61:9c:ca:8f:
1f:02:83:01:c8:a3:06:cb:d6:13:df:9a:cd:6b:e3:50:0f:eb:
9a:e1:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:15 2025 by rpki-client