Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: zkS9ZcjxLx+wlK3BIKQ5UESljPmYBTXQftmMbbiX5rE=
Subject key identifier: 6A:55:DB:12:F0:CC:0F:07:00:3D:20:CC:DE:D8:9C:C0:AE:E1:F5:7B
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 0198499C606FD5D3F5F9CDDADB6D992951B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 025D
Signing time: Sun 27 Jul 2025 02:00:41 +0000
Manifest this update: Sun 27 Jul 2025 02:00:41 +0000
Manifest next update: Mon 28 Jul 2025 02:00:41 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: DloD0DhjzNrjZjCP+bXgq7QTwcutnIVb624Nu0cPNsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:60:6f:d5:d3:f5:f9:cd:da:db:6d:99:29:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Jul 27 02:00:41 2025 GMT
Not After : Jul 28 02:00:41 2025 GMT
Subject: CN=6a55db12f0cc0f07003d20ccded89cc0aee1f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:8c:0d:25:73:22:10:d7:5e:c0:1e:1e:8a:
37:f0:0a:cf:dc:1e:d3:1c:36:17:69:78:cd:ae:8a:
5c:ae:d1:19:99:c1:5e:cb:82:15:b9:03:91:47:20:
9b:7c:54:15:6e:4c:ee:16:e3:a0:0a:f4:7a:ee:09:
bf:17:9f:df:c0:b9:09:93:c4:1b:6b:84:bc:7c:2a:
33:9c:d1:5e:cf:f3:79:c8:3b:79:b0:63:b9:7c:9d:
85:ea:e3:c2:f7:b6:88:aa:c6:84:6a:ee:56:85:ae:
7e:df:57:79:ee:6a:08:b1:00:fe:86:c1:17:5a:94:
84:98:1c:31:a8:b0:bc:b1:0b:16:6a:9c:d5:83:ae:
15:58:4a:8f:e2:22:2c:cf:99:af:64:9e:50:e4:20:
38:5c:de:03:d8:24:5f:3e:96:9f:9a:48:d8:70:2c:
d6:b5:92:e6:9f:bc:73:a1:7a:38:d9:18:15:50:23:
e3:79:57:cb:bc:e9:d1:4f:41:a1:56:fc:e0:dd:37:
84:09:8d:f4:72:b5:1d:77:57:1c:6c:4e:3c:48:c0:
6b:70:62:62:2b:4e:c5:10:1a:03:41:71:37:82:81:
e6:b1:12:46:39:d9:20:2f:ef:b7:b1:3f:d4:82:b6:
2e:bd:e0:92:5a:60:37:b2:97:f4:84:37:c7:60:45:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:DB:12:F0:CC:0F:07:00:3D:20:CC:DE:D8:9C:C0:AE:E1:F5:7B
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:26:36:69:f2:11:be:bd:bf:de:42:3d:da:8b:9b:50:b7:b1:
47:42:0e:32:dd:c1:b2:88:1e:9a:17:07:20:d5:b3:fd:50:5c:
58:f0:56:3a:26:b2:ce:11:37:17:fb:e5:e4:24:2a:7f:3e:4d:
a0:66:b6:2a:c6:3a:d7:6f:93:1d:53:76:c1:88:4f:d2:6f:91:
a6:e8:86:a7:02:12:e0:71:b1:fc:2f:4d:f6:38:24:94:89:dd:
74:c0:11:eb:bd:e8:5f:91:72:76:98:88:98:ea:c4:ca:b5:21:
b6:fb:21:49:72:42:c5:e0:c8:4b:10:1c:a7:82:b3:a7:9d:29:
37:29:b5:c9:49:e3:0d:b8:7f:9b:72:af:72:ac:27:aa:da:17:
be:7a:e6:e2:c7:aa:fb:bd:51:d0:7c:7f:66:67:ee:3b:15:af:
31:30:25:ba:01:27:30:44:32:4b:e1:e2:56:d3:3e:66:1b:a7:
a6:65:1b:1f:b7:60:cc:20:c9:36:3e:ea:ea:3a:3e:46:e5:05:
be:41:2e:44:88:98:d8:03:ed:20:d0:32:1e:40:43:b0:3e:07:
36:e6:f7:fa:1e:2a:fc:f6:05:4c:0e:ca:43:c8:bf:34:15:33:
2a:07:23:83:3c:97:47:ee:2e:53:a7:89:cb:ca:70:18:8a:b1:
cb:8c:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:01 2025 by rpki-client