Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
File: lPO2Epw0Od376Q21BkyAZt6GSnI.mft (raw, json)
Hash identifier: 0pgegCszNOO88reocLhP8cq1X+NDBegsQk+xFJytb+g=
Subject key identifier: F0:DC:00:A1:6A:13:8E:48:F5:10:99:78:8F:C9:4D:3C:D7:79:28:C2
Authority key identifier: 94:F3:B6:12:9C:34:39:DD:FB:E9:0D:B5:06:4C:80:66:DE:86:4A:72
Certificate issuer: /CN=94f3b6129c3439ddfbe90db5064c8066de864a72
Certificate serial: 01984A0A7671F748C9ACDEABBB8C7F7D4E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPO2Epw0Od376Q21BkyAZt6GSnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
Manifest number: 0515
Signing time: Sun 27 Jul 2025 04:00:56 +0000
Manifest this update: Sun 27 Jul 2025 04:00:56 +0000
Manifest next update: Mon 28 Jul 2025 04:00:56 +0000
Files and hashes: 1: lPO2Epw0Od376Q21BkyAZt6GSnI.crl (hash: wGgWzEcfBRLp3Mcd0FOQFkaUkQHflAzMNaMJhtFVCYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPO2Epw0Od376Q21BkyAZt6GSnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:76:71:f7:48:c9:ac:de:ab:bb:8c:7f:7d:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f3b6129c3439ddfbe90db5064c8066de864a72
Validity
Not Before: Jul 27 04:00:56 2025 GMT
Not After : Jul 28 04:00:56 2025 GMT
Subject: CN=f0dc00a16a138e48f51099788fc94d3cd77928c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:9a:67:de:82:09:4b:4d:5d:31:bc:af:cc:
2f:1f:72:09:fa:16:a0:35:5f:01:3d:60:e5:ad:47:
30:c8:b1:a3:f8:f3:3a:71:08:0d:b3:bf:00:b1:01:
e5:79:eb:d2:fa:c4:25:16:00:a2:2e:37:b9:7c:a7:
41:b9:9e:47:ac:4e:7b:33:44:82:5c:55:96:e2:15:
7f:74:a6:b3:0d:66:d6:5b:6f:6b:82:ce:0d:5a:4a:
8e:f2:da:39:98:72:47:9d:cb:c4:41:b0:24:67:cc:
db:b8:c1:c3:aa:43:0b:b7:22:f8:47:e0:4a:a3:8f:
57:ad:a9:42:dc:e5:c6:2b:b7:e2:7b:bf:01:ee:d5:
79:f2:31:38:c4:af:a4:a8:28:a3:c0:4d:a1:a0:a3:
a1:38:49:4c:74:32:97:27:af:95:60:b0:52:cb:b0:
09:17:71:80:ed:25:e7:a4:93:6c:28:6b:f6:3d:f9:
1e:0b:4f:92:e9:41:03:c8:0a:79:de:b2:6a:fc:81:
9f:64:7e:57:e7:b3:bb:26:46:2a:8c:e3:eb:d6:91:
8f:bc:88:ec:4a:fe:ec:ab:72:59:e0:c7:df:5a:81:
33:cc:f7:f8:04:0f:c2:1b:2a:f1:60:74:c0:97:ca:
f7:f2:81:33:9d:32:f1:70:28:55:47:66:31:65:7b:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:00:A1:6A:13:8E:48:F5:10:99:78:8F:C9:4D:3C:D7:79:28:C2
X509v3 Authority Key Identifier:
keyid:94:F3:B6:12:9C:34:39:DD:FB:E9:0D:B5:06:4C:80:66:DE:86:4A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPO2Epw0Od376Q21BkyAZt6GSnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7f:34:18:b5:76:d0:91:ef:8a:61:fe:39:58:87:ec:d0:bf:
25:0d:fc:11:81:e8:74:e3:31:f7:28:8d:63:6c:f9:fd:f6:d4:
14:ba:cc:44:63:b9:25:5c:75:ab:8f:a6:61:08:d4:c0:21:52:
e2:c6:e7:59:34:ce:d7:b5:02:f3:9c:d0:86:f0:66:d9:a8:09:
1d:5b:87:e8:26:d9:c5:5c:12:6e:d9:1f:ab:19:e6:06:3a:14:
b1:ed:99:c2:cd:5d:bc:f8:7f:c7:7b:65:a2:ec:4c:fc:4f:a7:
3a:05:0f:93:db:0b:fa:f0:a8:0c:60:d1:d2:3b:0f:d0:4c:6f:
d1:2c:15:20:34:8a:17:9a:9e:a7:69:f4:73:90:19:f2:9c:6f:
9d:3d:ec:ad:58:31:a2:79:e1:b0:89:ba:40:c5:41:ef:16:81:
d4:58:c7:aa:e6:4d:c7:05:43:7c:04:ed:6a:03:37:39:07:04:
ba:e9:a0:83:62:4c:f7:af:a8:1f:09:8a:bb:f0:46:22:02:d6:
1f:62:7b:30:a6:50:3c:6b:99:f4:56:db:ed:fe:59:a6:59:fe:
d0:8e:b4:3c:ee:a0:47:d8:90:57:46:e0:bb:f2:b5:0e:59:48:
96:6b:53:8e:df:66:3e:9e:c4:88:ff:ee:66:fc:e1:ff:29:09:
b9:a6:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:17 2025 by rpki-client