Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: GBeJIJsDolvKNwW/I83FKoFrcfzOBAq5szdZ3zqHNbI=
Subject key identifier: D4:0F:4C:DE:2C:8F:89:EB:4C:F0:BB:CD:A3:71:15:35:67:43:9B:F5
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 01974967B490C9531D22E69D4F5EB2F7A352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 03FE
Signing time: Sat 07 Jun 2025 08:00:22 +0000
Manifest this update: Sat 07 Jun 2025 08:00:22 +0000
Manifest next update: Sun 08 Jun 2025 08:00:22 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: GpGeIZ7PPKUMl8tdfKBCeVKaVoe6kL2B0orvK2kRRm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b4:90:c9:53:1d:22:e6:9d:4f:5e:b2:f7:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Jun 7 08:00:22 2025 GMT
Not After : Jun 8 08:00:22 2025 GMT
Subject: CN=d40f4cde2c8f89eb4cf0bbcda371153567439bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:bc:1b:e1:6e:74:60:b1:ad:fc:b6:7d:25:
a1:3f:b8:61:63:62:2b:08:95:63:1d:21:a0:b6:18:
96:48:ed:88:64:38:8e:ad:75:18:0f:83:25:07:cd:
33:90:f0:d3:cd:83:14:c6:63:c1:9f:ef:e8:9a:94:
6b:f8:5e:5a:01:22:19:0c:32:dc:ce:5b:4d:20:16:
be:30:69:49:6e:f5:52:af:6f:27:7f:c7:c1:28:91:
6b:58:41:db:83:19:13:01:7c:aa:08:d9:5f:61:29:
04:86:46:b3:19:01:b9:ec:67:0d:48:1b:56:2a:07:
c3:b4:fc:0a:de:02:21:e2:cf:01:a7:19:3f:5f:08:
3c:4e:73:d2:1e:39:fb:7f:9d:1c:72:2f:3f:6e:81:
b9:6e:96:cd:e0:56:02:82:34:8e:06:e4:21:06:94:
f9:8a:71:9f:0d:26:52:bc:16:96:ba:10:fb:64:39:
e7:67:a0:e2:03:f6:f6:c4:12:98:60:43:54:5f:34:
48:3f:3f:85:ac:4b:9e:48:e3:bc:a9:87:ef:ec:84:
51:59:cc:66:a8:3a:0d:fb:b0:34:64:53:31:13:0d:
b1:67:ad:7a:bc:09:69:c0:e5:a5:d2:88:f0:6d:7e:
1f:b4:99:ce:9d:54:16:7f:35:51:0d:dd:23:38:2a:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:4C:DE:2C:8F:89:EB:4C:F0:BB:CD:A3:71:15:35:67:43:9B:F5
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:21:34:7a:58:cd:37:e0:33:fa:82:2f:3e:5a:01:bb:86:
f1:08:14:8a:21:56:a3:c8:ce:5d:40:3f:bc:71:26:f3:57:64:
6a:5f:c2:85:59:1f:6e:5e:30:92:9f:d6:b8:10:1a:b9:31:a1:
7d:87:e9:86:d7:9e:8d:24:9c:fe:73:c2:b0:f2:f9:37:c4:00:
3f:f3:83:a1:45:f3:44:c8:2f:b3:98:71:c4:5c:de:7e:be:09:
91:3b:1e:f5:3f:c8:3c:be:c5:e1:c7:5a:fb:4b:40:ff:c7:43:
48:58:e7:41:32:0f:3f:a6:5a:93:4c:21:67:01:d9:60:be:cf:
25:bc:99:7a:e4:82:04:9e:ac:bc:ad:cb:4a:a3:90:0b:af:31:
bd:86:fa:57:d3:ed:14:aa:fe:99:d1:c4:c2:a3:6c:3d:32:34:
54:69:ad:42:8a:ee:75:ff:77:11:a9:04:6f:60:0b:6a:69:7a:
cb:ab:38:d2:4b:38:7c:2e:71:ef:c6:af:47:da:55:33:d0:ab:
1e:f4:5c:19:eb:c9:a8:ad:27:29:a8:cb:08:8f:4d:7b:48:57:
86:51:0a:8e:eb:ad:df:94:61:c4:6a:d9:e8:30:ad:95:ba:c8:
31:f9:c2:4b:44:8c:05:a1:47:44:d4:a8:1a:bd:48:a6:4a:2a:
03:94:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:39 2025 by rpki-client