Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: uvk6AZiL2qOweb7vcwfaL9C1qnHba48rwu93AokipQM=
Subject key identifier: 1C:C4:46:79:A4:33:9B:D3:E4:68:1B:FF:5C:5C:20:1E:C8:9B:C0:4C
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 0198469B72E1E5AC19A4984B7E4B5CB5EDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0AF4
Signing time: Sat 26 Jul 2025 12:00:49 +0000
Manifest this update: Sat 26 Jul 2025 12:00:49 +0000
Manifest next update: Sun 27 Jul 2025 12:00:49 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: 2+lG689EjA+I+tgcz46vijuR3dNaN75+eteD/FZraXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:72:e1:e5:ac:19:a4:98:4b:7e:4b:5c:b5:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Jul 26 12:00:49 2025 GMT
Not After : Jul 27 12:00:49 2025 GMT
Subject: CN=1cc44679a4339bd3e4681bff5c5c201ec89bc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:9a:a2:cf:8c:69:d9:1c:20:25:33:87:ee:
1f:68:5a:e0:1a:cc:b9:19:b2:b7:40:0b:ac:d2:09:
38:33:f4:2c:3a:02:b8:58:b6:47:fc:31:18:01:59:
b7:13:c0:af:cf:02:fd:9f:93:aa:43:0e:07:88:8f:
6b:e3:0f:d5:76:f8:c3:18:2c:17:fb:ce:ad:9e:ac:
a3:3a:42:76:4d:cf:2a:c1:d7:69:2d:7d:75:d2:5f:
6c:3c:48:e3:f5:1e:81:17:89:a4:e9:50:60:dc:b4:
83:dc:6c:a2:72:19:d9:15:9d:86:33:af:12:74:fa:
d7:83:f3:95:ab:fc:56:53:a6:8f:ea:d9:29:ff:c2:
da:45:19:95:9a:64:b5:6a:da:d6:a6:7e:88:eb:f3:
a0:bb:6f:5e:2f:72:93:ce:6c:40:a6:96:1e:e6:b0:
51:c4:82:94:72:a3:cc:74:ce:0e:09:17:19:29:0c:
ad:92:03:96:0c:af:27:3f:66:d9:d6:19:1e:3c:02:
cb:93:73:d7:69:ff:f4:6f:30:ff:a3:07:cd:82:47:
27:51:17:70:39:dc:82:a5:90:b0:5c:61:cc:54:47:
db:59:82:9f:3c:ce:51:89:78:57:98:8a:a6:7b:80:
a6:04:4c:03:07:92:7f:12:06:af:07:6a:6a:a6:1b:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:46:79:A4:33:9B:D3:E4:68:1B:FF:5C:5C:20:1E:C8:9B:C0:4C
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:85:a3:4b:30:4f:4d:2e:8c:d5:02:5c:9f:48:cf:06:77:
de:7d:0b:78:fd:85:53:af:14:44:4e:5d:b0:3d:56:9f:3c:c4:
cf:ed:12:82:6b:92:9a:cd:e9:10:ae:3d:03:99:f6:cb:26:03:
0c:3b:44:13:ad:bb:3d:56:47:c7:9a:55:28:df:68:7a:81:49:
71:44:7a:b0:a5:d1:67:91:6d:c9:5d:33:0f:62:94:8c:30:bd:
d9:88:09:b4:36:56:9f:9f:df:8d:f5:c2:4b:98:60:67:e1:d2:
e6:73:35:73:88:3e:4e:c9:59:09:29:cc:6a:b9:1d:18:c7:38:
7c:ab:bb:73:da:0d:49:ef:30:56:e8:df:51:0e:ba:a6:c4:6c:
56:ac:fe:22:2a:6f:b1:17:02:d2:d0:76:31:9f:2b:b9:b7:bc:
e5:28:df:4a:f9:31:ff:af:b7:88:ce:df:84:fc:ad:18:37:59:
f8:d0:de:fe:0f:58:cf:4d:c6:61:26:24:10:11:36:2a:4a:4c:
c8:7d:e6:3c:ee:54:ca:07:94:a8:30:7f:16:2c:57:57:a7:2f:
5b:77:9b:9c:40:5e:d2:a1:a8:e8:4f:c2:24:80:89:33:2c:c0:
4a:dc:b7:06:56:59:f5:25:da:1f:46:56:56:f4:c8:33:02:57:
c8:ea:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:56:22 2025 by rpki-client