Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: lpQZ+WaNyQN07+PpWDhuHEEUHs4cJHCpb0qe5MRATNM=
Subject key identifier: 3B:99:F2:71:5A:B2:F5:75:64:62:5D:02:00:E9:DD:E3:0F:CD:CB:03
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 01984A0A32F4BA3667DFD4D23461E2C18104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0CE0
Signing time: Sun 27 Jul 2025 04:00:38 +0000
Manifest this update: Sun 27 Jul 2025 04:00:38 +0000
Manifest next update: Mon 28 Jul 2025 04:00:38 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: JGAH51yBgxbdxUYqoTByTyjiYbrN/InlDYivmszGdbY=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:32:f4:ba:36:67:df:d4:d2:34:61:e2:c1:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Jul 27 04:00:38 2025 GMT
Not After : Jul 28 04:00:38 2025 GMT
Subject: CN=3b99f2715ab2f57564625d0200e9dde30fcdcb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:b9:14:be:b8:94:72:c4:c4:68:c2:12:76:
90:e9:4b:f5:de:d1:58:38:1c:4e:ea:de:f3:d6:ab:
43:8e:3a:cf:d6:fb:30:dd:6d:d4:9d:7f:a9:04:67:
09:76:95:19:88:ef:f3:c8:8a:28:ea:05:c1:cf:6e:
b5:ce:a6:d6:07:e6:fc:cb:5a:81:db:73:05:da:55:
4d:90:76:dc:a3:1b:a3:fb:af:9b:3e:75:3c:da:8e:
1b:99:a6:ed:16:02:73:6b:92:c2:84:aa:5f:c8:cd:
61:2c:ab:c9:ec:8b:bc:c3:9a:4c:1a:2c:1c:d5:a6:
1c:6d:e0:63:8c:d2:0d:21:76:db:8f:bd:8a:66:05:
43:99:bd:cc:31:de:a9:b8:ac:f2:70:73:50:bf:79:
5b:81:bb:7d:3d:da:bb:e1:00:3b:bc:62:52:45:46:
e9:d5:73:3e:a3:bd:82:db:9b:ef:ee:92:2c:81:f6:
7f:a8:18:16:32:29:c7:4c:0b:3b:7f:f2:20:f5:d8:
c3:1c:dd:d0:7c:09:e0:c8:82:c5:5f:81:a4:7b:f7:
51:3e:52:1d:21:3b:05:04:d3:9f:4b:6f:95:90:43:
9c:5e:f3:78:9e:57:8c:71:8b:ff:7f:13:9c:7c:65:
50:f5:36:90:d2:1b:9e:4c:40:ed:0b:26:1e:c5:2c:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:F2:71:5A:B2:F5:75:64:62:5D:02:00:E9:DD:E3:0F:CD:CB:03
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:93:c9:b7:a8:76:df:09:f1:f1:e0:a0:be:3f:15:5f:ab:
ca:93:65:94:a7:9c:94:07:c8:21:58:64:9c:49:dc:cf:4f:8d:
65:8c:a6:51:e5:67:31:19:8d:36:36:4e:32:a1:f3:4e:fb:7f:
f5:b2:f8:10:0f:75:51:73:30:12:84:31:5a:f9:eb:62:4e:e7:
ba:90:f1:e4:2f:8c:70:f0:32:98:ab:85:d7:65:67:36:e3:ea:
31:27:b0:c8:d0:f2:8c:6f:78:27:98:c5:d4:3f:90:82:5e:dc:
a9:4a:02:5d:5c:c2:58:bd:83:dd:1c:f4:d8:b0:fa:4c:95:37:
9f:56:95:34:ed:67:ef:99:26:ba:69:8a:0d:11:b9:3a:6e:67:
e8:56:b6:b3:64:86:48:ca:d1:da:7e:ad:4a:6a:9b:36:fd:53:
17:e7:df:f3:5c:2e:08:9b:ce:f9:0b:c6:3f:55:e6:40:36:86:
54:94:8a:3b:02:9c:d4:e5:4d:38:e8:ac:9a:ba:ca:84:f5:b3:
fa:98:52:9b:70:cc:01:d1:08:b5:65:11:bf:78:1f:3d:b8:a6:
b1:9d:41:ca:03:cc:0a:8a:5e:86:a7:e2:71:b8:ca:02:91:c4:
a3:9d:7a:f7:8d:38:88:5f:31:aa:b9:d4:44:f4:06:39:84:01:
5c:21:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:57 2025 by rpki-client