Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: 85Y6jjS9FBJVL94zbuXmIxFtz3hVTlzxlKkAcNTPbv0=
Subject key identifier: C8:9F:90:89:CD:1F:1B:B0:E6:C9:BB:06:B1:84:89:AA:1D:CC:A5:C8
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01993C151DAF8827745E663777A0064D5C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 16C5
Signing time: Fri 12 Sep 2025 04:00:40 +0000
Manifest this update: Fri 12 Sep 2025 04:00:40 +0000
Manifest next update: Sat 13 Sep 2025 04:00:40 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: n8aQ2DHrTD2hFDMyXrhUx6MPCd3RV5VdCuXh0Z6WTMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:15:1d:af:88:27:74:5e:66:37:77:a0:06:4d:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Sep 12 04:00:40 2025 GMT
Not After : Sep 13 04:00:40 2025 GMT
Subject: CN=c89f9089cd1f1bb0e6c9bb06b18489aa1dcca5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:90:e0:0f:53:31:01:cd:d9:33:bb:97:29:
c2:6a:ed:91:e0:7a:a3:01:95:fe:f3:08:4b:11:0d:
89:a0:76:c6:c7:8b:82:1b:a7:b5:17:3e:42:d6:f3:
b8:2c:70:55:0c:bb:05:4d:f6:02:43:50:a1:39:aa:
4b:07:12:fd:56:6c:d9:b8:67:72:52:79:d1:04:f6:
37:75:fa:74:31:37:02:ee:19:d6:e7:58:aa:0c:08:
dc:36:a1:8c:75:1f:2e:b6:46:07:93:93:a3:54:86:
cb:c1:d4:7c:a4:58:8b:f9:00:b5:ab:2e:57:09:de:
3b:98:07:99:73:d8:aa:2f:55:38:98:73:c9:c3:5c:
c8:c5:64:e9:a3:36:b2:b0:7c:b5:8c:c5:dc:0f:bf:
a0:b9:3e:17:f5:a0:2f:b9:4b:7e:7b:90:97:76:8d:
e1:ca:c3:7a:b1:38:a6:e4:9a:4d:ca:37:62:79:8d:
3f:1f:3a:30:4f:1f:5e:d2:7b:5f:32:7b:cd:23:9e:
b0:12:0e:f0:2f:af:33:96:57:f1:bb:72:fa:d5:94:
a9:b3:01:5d:5f:b8:88:ec:54:d6:b0:4a:9d:c0:2a:
94:43:f8:e6:61:5f:28:42:f2:0f:77:da:0f:b4:59:
16:e5:86:ac:3c:5c:08:b0:d4:75:3d:7e:2d:f7:2c:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:90:89:CD:1F:1B:B0:E6:C9:BB:06:B1:84:89:AA:1D:CC:A5:C8
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:2a:7c:62:7f:47:7d:3f:7d:3c:2d:bb:c1:8a:e2:d6:d0:
f9:da:90:5d:d7:9f:b8:5f:fb:c1:68:04:0b:fe:1e:de:90:7f:
50:9a:bc:1f:dc:5a:3f:9f:e8:58:87:e6:f2:ad:1b:55:fc:ca:
9a:a5:2c:bd:ba:58:39:b1:c0:ac:e4:fe:bf:7e:5f:e8:0e:62:
62:37:39:5e:fc:9a:ed:bd:f1:b0:bf:3d:3d:9a:c1:a0:06:dc:
03:db:65:d1:29:95:a4:01:ae:e1:31:74:37:1e:4f:84:8b:51:
17:08:06:54:ea:97:01:0b:47:7f:21:db:98:69:27:a5:ad:fa:
3e:0c:98:49:9b:b4:32:85:98:fd:d0:df:4e:30:c5:85:db:3f:
2a:c7:08:4f:c6:48:ab:00:91:8e:95:72:3f:df:e3:64:08:df:
34:f9:16:0d:c5:8a:97:ee:65:f6:2b:9d:b3:87:2b:ee:b0:01:
40:c8:10:c4:80:46:84:fc:87:6d:36:aa:45:07:95:3d:92:2e:
ff:08:3e:9a:0a:2e:0e:61:f7:d1:df:03:13:bc:05:55:76:f7:
56:c1:91:5a:cf:5d:7c:fe:9b:f9:28:f3:79:c4:24:bf:4d:15:
2b:8f:8d:53:e5:5a:e1:ba:95:e1:21:98:e3:32:8a:31:cb:60:
0b:f7:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 06:12:23 2025 by rpki-client