Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: urFm18oSdMfI9x6PfP1czRiVMCZ4DiZ6B9bFLu1MaS8=
Subject key identifier: E3:B1:4D:4B:B6:A1:79:AB:DD:05:A6:1B:1C:6D:F6:1F:7E:2B:DE:CA
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 01974A43A024A433AF601C296F024883FE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0D3C
Signing time: Sat 07 Jun 2025 12:00:35 +0000
Manifest this update: Sat 07 Jun 2025 12:00:35 +0000
Manifest next update: Sun 08 Jun 2025 12:00:35 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: uL27CChOwPuZXm3O4EA2JaIt7i2iTrn9ZUcdColLIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a0:24:a4:33:af:60:1c:29:6f:02:48:83:fe:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Jun 7 12:00:35 2025 GMT
Not After : Jun 8 12:00:35 2025 GMT
Subject: CN=e3b14d4bb6a179abdd05a61b1c6df61f7e2bdeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:de:c0:f6:c2:11:e9:2a:e5:b9:5f:18:58:
56:e5:db:4c:78:dc:88:71:e5:42:33:f8:94:da:e6:
ef:6f:9c:86:71:54:82:cd:d2:1b:40:2d:a3:4c:31:
cc:d1:25:c3:c8:a6:24:db:df:cb:c6:4d:25:a1:f7:
d7:12:76:de:0f:d6:94:9f:d2:6f:a3:e9:55:a0:86:
8b:7b:24:e1:9d:89:0b:0d:9c:e2:00:7f:33:a1:78:
d6:47:8f:cc:e9:32:a8:4b:f8:98:72:83:c8:fc:ea:
af:0d:0f:5a:80:b2:8a:17:bd:f5:cd:06:57:44:1f:
bd:92:b8:64:f6:75:6e:e8:41:63:eb:3c:35:35:23:
9a:e4:00:6a:a8:a4:e3:63:da:a8:83:ef:19:04:ca:
33:38:e8:a2:a5:60:28:69:e7:7a:c2:15:5d:45:03:
18:5a:ca:d0:58:08:f6:6a:9a:a3:39:00:64:52:1b:
43:07:48:96:32:e0:c9:06:4e:a7:64:3f:de:1b:4e:
13:78:7c:d6:4d:e8:eb:60:87:57:3f:1d:d5:fd:74:
f6:42:b2:1c:e5:71:e1:0f:93:0f:ba:9c:63:69:fb:
dc:69:9b:84:a7:fa:9f:a1:31:de:53:a8:cf:67:bb:
a1:e4:c1:4c:3d:e4:43:91:7e:04:ec:5d:b8:c8:95:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:4D:4B:B6:A1:79:AB:DD:05:A6:1B:1C:6D:F6:1F:7E:2B:DE:CA
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:62:78:71:9c:6d:26:b2:ff:12:ef:78:7e:82:cb:b4:8c:
72:4c:d1:dd:1d:6a:c0:f1:b5:27:26:33:a1:12:36:ab:dc:a6:
bd:4b:07:94:f9:02:d6:c3:0b:8a:c1:bf:b6:81:f7:1e:42:01:
4e:b7:ce:c9:0b:43:65:18:5d:05:7b:fb:a7:69:c6:5d:2f:75:
bb:9f:02:76:a4:8d:96:99:30:0a:70:14:96:f2:45:04:ee:8d:
70:40:dc:33:7e:e6:34:b1:e1:93:8a:75:18:28:b8:c6:41:23:
93:bc:46:1f:79:30:26:8e:b5:6d:08:59:16:d5:7a:e8:0e:bc:
59:a2:83:f4:90:21:60:bc:46:e8:72:ce:7c:f1:d4:7c:03:55:
db:ee:a5:6a:f0:2b:ed:1a:51:a1:49:10:f7:cc:ff:75:6d:32:
93:ea:6d:93:94:f3:da:5d:02:db:8b:f6:89:54:97:13:d5:8e:
cc:58:2b:ce:60:e5:ee:c6:8d:31:9e:d6:d9:c6:fb:f8:31:97:
e1:17:e2:40:a8:fe:df:dc:a8:4a:64:5f:82:72:84:42:77:52:
d3:7e:d0:69:8a:9c:62:e8:c9:75:d5:14:bb:0b:a8:3d:09:a3:
f2:c4:cc:4e:c4:09:fb:33:9d:45:7d:93:4d:b8:74:b7:86:e5:
43:e8:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:16 2025 by rpki-client