Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: lCzi10Emxc3l/x2PhUM2hDQrj33U1qe5KoqdmKtq6DI=
Subject key identifier: B1:63:08:45:4E:31:31:95:D8:D8:EC:26:EC:B1:4A:EB:30:4D:95:6E
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 019747E7B2D56130A1801DFF804F15869317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 15C2
Signing time: Sat 07 Jun 2025 01:00:56 +0000
Manifest this update: Sat 07 Jun 2025 01:00:56 +0000
Manifest next update: Sun 08 Jun 2025 01:00:56 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: N0BxmEyS4sE70HdqzynK0B/qQGquIg3llIq6U+LWfbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b2:d5:61:30:a1:80:1d:ff:80:4f:15:86:93:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jun 7 01:00:56 2025 GMT
Not After : Jun 8 01:00:56 2025 GMT
Subject: CN=b16308454e313195d8d8ec26ecb14aeb304d956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:86:df:7e:65:6f:47:87:ad:50:8c:3d:f7:
f6:1a:56:13:19:4e:f4:4f:2e:31:16:95:23:21:cb:
46:94:c9:75:66:ce:e2:33:f4:a2:f9:20:f1:8d:fd:
bb:cd:60:ce:6e:e9:20:ec:ca:45:46:ff:05:7e:95:
3e:34:31:29:2e:54:de:b7:53:37:0b:41:d3:66:77:
1c:9c:70:2d:cf:8d:dc:13:78:52:ff:15:1c:c5:63:
b7:07:c1:5b:cb:64:03:ae:c5:4d:30:15:0c:a0:c9:
89:98:7b:15:ce:57:09:44:30:93:fb:5e:08:bb:d9:
fd:fd:62:86:44:77:00:d1:16:a8:d4:cc:fa:f2:dc:
5b:a3:67:2f:e4:8e:30:cc:86:76:d1:c7:ca:80:15:
c8:df:16:1d:67:1b:41:f6:10:7d:28:c1:16:51:13:
b6:f4:b2:e0:52:80:f9:c4:e5:66:49:f1:83:8f:5a:
10:c9:b9:c8:a6:30:54:a5:04:1a:c4:ce:83:8b:f0:
17:4a:5a:cb:a0:97:3f:fe:81:56:4e:ec:88:29:d8:
cc:57:18:1d:b7:7d:a0:db:f5:cb:62:d5:16:75:72:
f3:59:78:54:80:5d:26:ec:90:2c:22:27:3f:ea:46:
ae:40:c3:f0:65:52:67:df:0d:5c:81:6c:cf:86:73:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:08:45:4E:31:31:95:D8:D8:EC:26:EC:B1:4A:EB:30:4D:95:6E
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9c:4b:7b:90:c6:01:81:80:a6:c9:13:56:f7:82:c0:8e:3b:
4a:49:db:3f:48:bf:15:08:f8:7d:2d:7c:06:55:9a:4f:d3:84:
ec:f2:1e:1e:cf:84:55:1f:d6:4c:a6:a8:48:40:ed:99:05:c2:
97:38:f6:bb:b5:b5:db:ca:11:0a:9d:79:0b:c5:c8:27:19:27:
41:63:ca:92:89:d5:c7:d9:a3:50:eb:4b:30:09:ee:0d:af:3d:
1b:1b:40:12:3e:f7:1d:8c:5e:43:d2:70:b5:43:4c:13:82:8c:
52:2d:4a:62:1f:bb:c7:da:39:db:60:92:9f:14:4b:18:ef:fe:
6b:15:7d:68:d9:5b:03:a1:0f:45:7d:c3:0a:3b:87:b2:c4:ae:
e7:cb:1a:d3:86:db:8b:f6:4b:0e:91:19:c0:bf:db:4c:e5:bb:
55:a3:8f:fc:a4:6c:ea:72:37:bc:82:86:2a:c9:eb:9f:37:39:
ca:1d:d0:58:6a:4a:37:cd:31:0c:fe:4c:9f:fc:aa:c6:53:9f:
e8:7e:f1:58:9f:40:08:7e:cb:ab:68:42:85:ed:2e:f9:c0:26:
1f:d6:3d:81:a7:d7:a5:96:36:02:57:4c:83:bc:c3:2e:b6:21:
dd:e1:18:91:a1:45:85:27:0e:db:f4:09:c5:d8:e7:31:94:c8:
54:21:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:18 2025 by rpki-client