Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: XOEn5fRU+plr+q44+XIoXN+RxBaGHsc55FJSs8xV9wI=
Subject key identifier: 8D:DF:8B:9D:EF:5B:C5:3E:A5:49:E0:CE:8D:2B:03:E1:06:43:9A:94
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 01984964FAD24FA9FED172CE06C0B0775CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 048D
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: pkg0fDuffK2TU2i96NlLlHGAq/Xvf0Xz2/FMHermVjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fa:d2:4f:a9:fe:d1:72:ce:06:c0:b0:77:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=8ddf8b9def5bc53ea549e0ce8d2b03e106439a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:84:90:6b:01:57:c5:71:cd:09:a2:ed:cf:
d8:37:a7:f1:f8:38:0d:84:d7:64:85:83:3d:39:89:
16:33:78:dc:e6:2f:5a:63:3c:c6:2b:72:4f:e7:35:
60:24:12:75:89:16:b3:cb:01:cc:ac:ec:05:aa:77:
88:f6:fb:3f:81:e1:ae:f1:a0:bc:39:0a:cd:f5:2c:
e3:14:83:54:d0:8d:b9:1f:80:cb:85:51:c3:a0:5e:
70:95:e4:3f:4d:34:75:34:8e:49:9a:17:e4:df:6d:
4a:52:07:91:67:65:22:72:eb:7b:40:0b:67:87:2f:
02:2a:08:c4:37:4f:7d:f9:e8:e3:78:c8:68:b7:ce:
9d:3c:c8:29:bf:1d:d5:a1:94:e1:3c:35:a4:95:fc:
2c:2c:30:8e:38:3b:19:fe:fb:be:9f:30:1e:26:e7:
37:8a:7c:9c:75:dd:db:af:6e:87:a9:5e:d4:89:eb:
68:3d:c6:e0:dd:8e:65:6c:6d:80:d5:f0:48:49:da:
16:7e:b4:2b:e6:28:e5:e7:0f:b5:52:f0:51:f6:8a:
7e:13:3e:50:d8:17:80:81:d4:5f:97:04:7b:71:12:
2b:b2:dc:c5:62:1b:59:b8:4d:e5:60:4d:bd:ba:3e:
db:ee:a2:5e:4c:3f:9e:d6:d5:3f:62:1f:54:a5:8e:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:8B:9D:EF:5B:C5:3E:A5:49:E0:CE:8D:2B:03:E1:06:43:9A:94
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:51:db:81:30:6d:ff:1c:00:f0:4d:21:3f:de:c4:68:9e:
00:d3:1b:c6:d7:cd:aa:73:f2:10:a3:0f:f5:78:2d:6f:9c:fa:
7f:9e:31:70:16:cd:33:45:bd:b5:d4:20:73:cc:e1:06:5c:80:
92:ff:e8:08:94:1d:36:a4:32:3b:36:40:03:98:77:5e:f6:7b:
ee:40:a6:bb:1f:4d:fb:fc:58:e1:01:58:5f:a1:37:6c:96:41:
0a:dc:b3:94:58:eb:94:74:4b:86:58:48:07:f4:6b:d3:7d:52:
39:d1:8d:25:3a:ee:1b:95:86:98:99:c8:0c:e8:9b:bf:79:69:
be:95:c0:97:ba:ea:33:12:04:2b:78:79:f6:88:d0:a1:57:d4:
7a:65:ac:4a:11:13:37:b1:b4:33:66:95:43:0e:56:a4:2d:2d:
a3:84:2c:8d:2e:e9:d7:f4:ec:22:a9:0b:e7:8a:8b:ff:16:14:
74:b6:40:fb:81:e5:95:90:9c:32:8b:f8:69:2d:6b:50:08:3c:
8e:89:c6:da:f8:3f:87:2b:42:96:28:9e:23:1d:a2:ba:d4:b9:
66:8a:59:8b:9d:02:1d:7a:9d:95:da:19:9c:05:0b:2e:b6:0a:
2a:1c:0c:c0:70:0a:fb:82:f5:4b:e8:0c:1e:59:7f:14:17:44:
b5:e6:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:45 2025 by rpki-client