Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: TsqtdOQ6FtezzmaCxj9QD6jmmgW+s7n60LkRtGCVbbs=
Subject key identifier: A7:2C:19:51:7C:30:F2:5A:DB:DC:B6:2F:23:50:26:2B:AA:FF:F8:0B
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 01974967C1920644C187141DE8D1DAAAC6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 132A
Signing time: Sat 07 Jun 2025 08:00:25 +0000
Manifest this update: Sat 07 Jun 2025 08:00:25 +0000
Manifest next update: Sun 08 Jun 2025 08:00:25 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: Vs41FAUP6F1U35ismPiBSuT4UPNZGRWAQHoDpjaPZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c1:92:06:44:c1:87:14:1d:e8:d1:da:aa:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Jun 7 08:00:25 2025 GMT
Not After : Jun 8 08:00:25 2025 GMT
Subject: CN=a72c19517c30f25adbdcb62f2350262baafff80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f7:02:fc:a6:84:4a:2a:ab:a3:83:ea:1a:9f:
b9:89:c0:f8:12:52:17:ed:32:d2:a0:78:41:7d:3f:
ec:ea:03:a9:6a:f3:b7:fd:17:15:ac:68:f7:c7:d6:
18:9e:68:77:f6:ef:c9:86:26:09:41:a8:72:a9:b0:
34:09:38:c6:eb:bb:56:3f:f5:e6:0a:cb:98:a3:e6:
e2:34:db:a1:4d:57:87:8a:ec:ab:6c:1f:cb:3d:80:
b6:55:b4:ba:cf:5c:fe:53:b0:65:23:f2:8e:e0:a4:
20:aa:b3:67:1a:55:e9:09:39:f0:f0:a5:22:51:2b:
1b:4b:23:eb:5e:48:8d:24:af:d3:35:8f:68:9c:5f:
29:cb:5d:b5:12:06:80:8a:a7:ba:a3:17:92:2d:38:
4f:fa:8f:9b:8a:f8:0c:59:78:fe:29:da:50:b2:ce:
72:0a:89:a9:b1:c1:ca:55:90:d0:9a:f6:c7:3b:d3:
aa:8f:47:ed:c0:c5:3f:22:d5:d1:39:92:f8:86:fb:
bb:c5:32:a1:66:98:ae:64:b4:54:44:c4:04:65:44:
67:f3:c3:7d:59:1b:84:f0:74:54:f5:51:71:81:ce:
94:3a:f8:5a:aa:84:d1:92:c3:d6:5f:a0:cc:9c:3c:
53:db:1f:3b:3e:9a:46:a6:7e:5a:35:5c:0d:f6:ae:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:19:51:7C:30:F2:5A:DB:DC:B6:2F:23:50:26:2B:AA:FF:F8:0B
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:d4:aa:b2:65:54:5e:7e:2b:07:a6:7e:b3:8e:2b:af:74:
f9:9c:c8:2d:fc:e6:75:57:73:f8:b7:e8:7a:a9:44:81:46:ae:
8c:dd:22:cf:13:62:5b:c8:c6:8b:98:27:bf:40:12:38:97:ac:
7e:cc:b0:5a:40:b5:39:64:80:06:21:63:5d:5d:28:f3:1f:6b:
9b:f6:4f:5c:1f:9b:ea:8c:cc:18:ef:bd:62:8c:1b:c1:8b:12:
e6:b6:0c:a6:5b:a0:73:33:3d:d1:cd:59:ea:72:7b:85:8c:2e:
4c:5c:11:df:97:9f:72:8e:b3:cc:29:cf:4b:1f:a3:6a:1c:cc:
ef:4b:3e:6a:c5:97:40:a6:49:d7:15:2a:4d:d2:00:7a:72:45:
ad:80:54:b9:ab:0e:2e:53:73:2f:b6:85:b8:f0:72:4f:f8:f9:
12:4f:9c:03:f1:51:b4:90:14:6c:86:28:95:29:0d:d2:27:fa:
11:46:ff:ae:3c:a3:cc:00:15:a7:d2:17:66:40:a3:6c:5c:fd:
96:63:ae:0f:ac:50:25:c5:db:75:f0:1c:66:1a:d4:bb:ea:98:
d2:a1:38:58:ac:c7:f0:dd:b3:c4:ce:47:92:39:f3:1f:78:0a:
0c:cd:a3:74:01:df:48:a2:e6:68:88:2f:a9:0e:1b:1d:98:f1:
33:9d:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:33 2025 by rpki-client