Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: 6V2NqhBdKwae/3J8UIQkQ4kynpRPVV5y9PXha+12oLE=
Subject key identifier: E6:DC:1E:3D:B8:F9:DD:09:EF:C8:D4:3A:BE:C3:48:90:5D:F0:58:CF
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 019749D6102510E15ADC79EEBB6CE66414D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 083C
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: 1FImirPu9PJ6uUqkqxWQGD/OzuBPi20MD5Z3uGuFUBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:10:25:10:e1:5a:dc:79:ee:bb:6c:e6:64:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=e6dc1e3db8f9dd09efc8d43abec348905df058cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:08:a3:ea:e4:48:03:25:bb:70:39:f8:bb:
f2:c0:c5:ab:e3:ac:48:65:7e:10:6c:9a:ec:a0:3c:
18:e7:d2:9e:b6:8b:10:da:6d:92:11:27:8a:09:e5:
28:65:cb:44:7a:27:95:2d:6b:5a:4d:7c:79:a0:6c:
93:d0:14:9b:8f:97:b8:4b:62:c6:6f:42:64:b6:e2:
a6:1d:fa:4b:d9:be:1c:1f:0f:d6:8c:a9:f0:4c:17:
10:98:43:10:68:19:b4:a8:a9:f5:d0:a8:8b:ed:77:
2c:85:54:25:b9:0c:4f:3d:8c:47:ce:b8:5f:02:83:
27:c0:cb:e8:53:a1:3e:77:fb:80:0e:4e:cf:e2:53:
b6:aa:d3:25:d5:47:01:57:b6:8d:5a:b4:44:5a:0a:
0e:56:8a:4d:0d:87:2d:25:63:a7:5b:46:11:0b:66:
a1:c9:06:3f:87:c3:55:e1:1d:4c:6d:a1:d2:af:d8:
b8:1d:11:f3:ec:44:d0:f1:a5:86:38:38:7f:07:63:
db:86:c7:69:39:29:25:36:86:f0:80:07:a3:bd:43:
6f:6e:b1:89:49:fc:1e:a7:8b:27:e8:6a:ac:65:cd:
1e:78:d7:8a:65:8f:6d:d1:7a:c2:d2:74:2b:aa:fb:
e5:80:6e:f8:a9:7b:2c:11:36:a8:70:e4:77:c9:80:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:1E:3D:B8:F9:DD:09:EF:C8:D4:3A:BE:C3:48:90:5D:F0:58:CF
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:af:67:84:c2:86:c0:6d:90:89:16:58:c1:14:4d:2d:78:
f8:e7:59:77:46:a3:1d:90:24:30:13:27:46:d3:41:36:ae:5c:
2e:a9:26:b8:65:3f:bd:6e:b8:6d:af:3f:0b:f0:ae:db:21:b5:
2b:ff:83:54:49:81:60:a0:4d:28:b6:4d:2c:de:8b:35:01:87:
89:5c:97:81:5c:91:a2:a8:3b:01:06:68:a4:81:d9:0e:69:01:
00:aa:89:b4:c1:40:24:8a:c3:95:08:d8:bc:a7:5a:4d:f4:57:
07:b8:c4:21:0e:3b:78:6f:39:b0:af:8f:8e:b0:31:54:5e:7e:
bb:b9:41:d4:1f:77:8d:79:b1:fb:22:fe:ac:6c:fd:83:da:95:
94:f7:c9:73:67:82:a0:46:70:ab:55:77:1a:d2:8d:22:3e:c6:
5b:c1:87:0a:8d:6e:b1:2b:18:21:07:da:ec:3b:b9:3b:d7:4f:
70:6b:b3:4f:60:01:63:39:7d:3a:47:2e:a2:b8:49:23:b7:88:
b3:f6:a4:96:c7:5a:f8:f0:02:b8:5f:4b:c5:12:8b:76:ba:2f:
b2:6c:73:82:65:ed:04:99:e6:e8:72:54:ef:f6:14:2d:ff:f6:
46:f3:b5:8a:97:1b:fa:e5:93:29:89:98:c4:50:80:df:4a:55:
c0:17:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:24 2025 by rpki-client