Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: AMRoS3TTqML6LMlMq0Wm0GtLNEim+yeuCxsh8/PO5aE=
Subject key identifier: FB:AE:06:0C:37:DB:1A:53:BF:F3:DA:57:44:F2:62:77:EA:C7:E5:E7
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 019921B1CD9457A87F0286B5F7E59B7D5EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 0690
Signing time: Sun 07 Sep 2025 01:02:04 +0000
Manifest this update: Sun 07 Sep 2025 01:02:04 +0000
Manifest next update: Mon 08 Sep 2025 01:02:04 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: OmY8hlIgDjiH0F5zoRhRK9SGEbVfDiHRJxlpVWDACcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:cd:94:57:a8:7f:02:86:b5:f7:e5:9b:7d:5e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Sep 7 01:02:04 2025 GMT
Not After : Sep 8 01:02:04 2025 GMT
Subject: CN=fbae060c37db1a53bff3da5744f26277eac7e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:5c:5e:02:76:93:dc:66:36:20:45:9f:9b:
c5:26:05:9f:c9:1b:f8:22:a2:81:d1:a9:62:30:4c:
4f:76:c2:5e:14:5a:29:30:f8:77:2c:c2:d2:36:8b:
da:df:d0:91:c0:18:2f:d7:5d:2a:ac:02:c3:b6:8b:
cc:45:0b:65:ac:0c:c6:eb:c1:6f:b2:05:3f:e4:85:
4b:ec:18:fa:a9:51:ca:87:69:3e:f3:5d:29:a4:56:
d4:58:2f:e6:f8:cb:df:84:5a:15:2b:84:77:08:20:
02:13:d4:d7:b8:59:b9:cb:80:16:2e:f5:71:44:6f:
7e:3d:43:8b:44:89:b6:f1:ed:60:2c:d1:86:2f:23:
68:8e:bd:29:09:f1:9f:df:9a:8e:9e:a2:bb:fb:31:
9f:a6:a4:22:5d:cf:39:5d:c5:22:6b:a4:85:dc:75:
9c:21:44:17:4d:c0:e7:d8:51:d5:ff:8f:83:9f:10:
3c:df:7d:d0:61:ad:4d:63:04:7e:f1:7a:06:4f:5b:
48:89:e8:b8:a1:89:42:de:8a:8a:72:cd:52:95:d3:
1f:cb:31:9d:e4:bc:03:0d:d5:33:3e:85:8e:aa:90:
04:0a:21:12:a6:43:69:e3:c0:85:92:28:ca:82:9e:
ea:37:f1:1b:ae:a4:88:78:32:d4:6a:25:ec:d8:fc:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:06:0C:37:DB:1A:53:BF:F3:DA:57:44:F2:62:77:EA:C7:E5:E7
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:aa:f3:87:58:e9:db:e0:ad:6f:23:d7:a1:9b:16:d6:cb:
f1:25:92:55:80:31:fd:c2:55:15:b0:0f:11:be:47:ce:88:7a:
fc:15:78:08:4f:80:ba:ab:ec:d1:28:cb:e5:4b:0d:23:22:c9:
05:b8:bb:6e:3b:20:ff:e2:6d:d7:15:34:c1:29:08:d3:c5:b1:
59:af:49:78:68:77:8a:75:69:af:84:89:6f:4e:b8:42:ef:1e:
fa:d5:96:8f:13:f9:60:e5:ae:0b:61:94:a5:04:5b:d6:2d:cf:
fa:df:0f:e8:7b:e2:14:27:5b:f3:75:11:b2:a2:d9:34:c1:12:
e8:63:c2:d1:aa:8f:cc:b0:cf:e4:c9:c1:af:4b:8c:1d:9b:b5:
fe:67:3d:98:72:c6:db:af:06:0d:ff:81:17:75:38:7a:9d:5f:
6e:67:c5:c1:38:50:2a:1c:a4:4d:4c:d5:d7:75:3a:7b:63:d9:
6e:1c:ff:1e:38:5c:e6:84:1b:e3:9c:8b:32:34:49:bf:0c:32:
57:3b:50:d6:d4:e5:e4:87:5c:aa:d2:d1:30:46:75:bf:b9:64:
c3:35:51:9a:0b:ef:6a:a3:8c:1f:7a:6d:04:b4:71:8d:f1:e8:
10:0f:23:29:ca:b8:b1:69:4e:ab:42:a9:d5:25:59:85:c2:4e:
28:ca:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:04 2025 by rpki-client