Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
File: Lamd3TmQcoABaWYXi_aOXEY8LrY.mft (raw, json)
Hash identifier: eswNkD9NUPKvBA6UXBtTTMrBtRQ0lpDNIx3sjJy2SQM=
Subject key identifier: C9:EE:1A:2D:75:52:E1:1F:5A:A6:90:9A:F3:D9:3B:F0:0F:C7:4A:05
Authority key identifier: 2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
Certificate issuer: /CN=2da99ddd39907280016966178bf68e5c463c2eb6
Certificate serial: 0198530DEEF0D9DDAA60B19FD454FCD63144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
Manifest number: BA
Signing time: Mon 28 Jul 2025 22:01:18 +0000
Manifest this update: Mon 28 Jul 2025 22:01:18 +0000
Manifest next update: Tue 29 Jul 2025 22:01:18 +0000
Files and hashes: 1: Lamd3TmQcoABaWYXi_aOXEY8LrY.crl (hash: JG44rmTTR9kbzS3i5LFfICYK+OQKjJ+3WmM8to1QvcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:ee:f0:d9:dd:aa:60:b1:9f:d4:54:fc:d6:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da99ddd39907280016966178bf68e5c463c2eb6
Validity
Not Before: Jul 28 22:01:18 2025 GMT
Not After : Jul 29 22:01:18 2025 GMT
Subject: CN=c9ee1a2d7552e11f5aa6909af3d93bf00fc74a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:da:5b:7a:14:90:e9:9d:11:a7:f1:96:3b:
88:23:bc:37:93:de:a5:87:5e:c6:0b:a4:d2:ab:22:
dd:49:ce:4b:09:84:c4:0d:4f:34:58:42:5c:16:e1:
58:d1:d0:1c:9c:ff:8a:ca:87:b4:46:97:2d:e2:9e:
7f:e2:0d:24:fe:c3:55:f7:ff:37:d5:c8:2b:f1:d8:
9f:7e:67:24:09:bf:29:9a:dd:2f:14:7b:ad:2e:fd:
3b:42:09:95:e1:20:92:6a:73:b2:22:61:2f:bd:76:
c1:0c:22:b9:55:96:ad:48:46:26:b7:86:d2:71:83:
30:a9:4b:77:dc:57:f7:23:18:5a:43:fe:25:9a:c0:
60:f7:6b:89:d1:f2:db:c3:28:ec:20:cd:eb:11:5d:
5c:7b:2b:7b:33:80:0e:9c:5d:36:8f:0e:b0:5f:24:
6d:2a:83:7d:77:4f:03:a8:74:f3:ab:7f:89:f1:53:
0f:80:dc:97:18:69:ac:a6:63:f6:57:cb:b7:16:49:
5a:c0:b3:6e:50:b4:85:14:76:30:74:ba:4f:2d:b2:
8f:55:59:91:6a:fd:70:50:f3:fc:19:4b:95:c2:40:
3b:78:42:e5:d7:69:a9:84:ba:87:83:ca:b2:d4:b8:
c5:44:27:79:77:2a:00:e3:9e:c6:f5:09:53:ea:ff:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:1A:2D:75:52:E1:1F:5A:A6:90:9A:F3:D9:3B:F0:0F:C7:4A:05
X509v3 Authority Key Identifier:
keyid:2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:85:10:f1:4e:50:3a:35:90:f8:c4:db:b5:04:94:93:f6:eb:
e7:82:6d:9c:2e:81:6f:ed:28:00:94:6b:5c:3d:1d:a6:53:16:
53:41:73:94:4e:fb:63:10:12:53:ac:3a:0b:fb:c0:b2:64:5e:
a1:7c:a1:0a:ab:38:ad:1c:47:25:49:46:85:02:75:86:cf:94:
c1:8c:e5:ca:bd:a1:70:b4:66:3a:44:8c:aa:47:37:fb:d3:d9:
8c:ea:71:62:c3:98:d3:2a:81:2d:ba:b3:61:9b:45:ac:dd:e8:
60:17:19:61:6d:a5:ce:71:c4:4d:07:45:f3:88:d4:3d:c8:2d:
8b:ac:c5:cb:e4:0f:30:51:c2:7e:84:3d:a6:d4:c1:ca:2d:5b:
fb:c6:94:48:c4:f4:f1:85:a8:df:09:0b:79:55:f6:f1:0c:5d:
ba:09:d7:68:93:1e:b6:4c:6a:2f:34:c7:9d:6f:ce:e5:38:2a:
7d:42:1b:07:83:a7:48:ff:d1:dd:b9:80:eb:12:af:a6:17:ef:
c5:cd:20:67:43:96:22:4b:71:9f:38:0f:19:7f:a8:5e:ed:ac:
e6:0b:ba:ce:ae:1f:38:4a:30:93:3f:a2:aa:34:0d:65:ba:9f:
9b:5c:5a:63:e0:3a:1f:85:26:70:e4:e9:74:08:63:9f:9d:28:
66:ae:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:47 2025 by rpki-client