Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File: lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier: 9CNfyeglsZmXcXrOUTYe28VGiLZWxd4EPpzxL2WYgJ0=
Subject key identifier: 45:63:E8:E8:34:0C:2E:A1:DB:B4:29:E0:45:53:B5:23:25:B1:BC:C5
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer: /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial: 0199221EDFAFFF60F8EA7EF82EF47490BE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number: 0DE7
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: bzzX3ofiA7ECZXj/rsm04/S7S/Vnx2ju4E+Fvjm4Cm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:df:af:ff:60:f8:ea:7e:f8:2e:f4:74:90:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=4563e8e8340c2ea1dbb429e04553b52325b1bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:fb:cd:46:53:a5:07:01:6a:fb:5f:c0:18:
11:1f:ef:fd:2a:f4:bb:95:66:2e:2b:35:c9:a8:62:
a6:40:cf:8a:32:ba:07:6b:22:fd:2b:49:b2:fa:96:
69:79:a5:f5:b2:0c:cd:f1:8c:95:83:fd:f2:aa:45:
2e:eb:71:65:25:78:c7:35:46:8c:e3:c5:cb:23:ee:
ff:c0:ed:ec:dd:57:6a:cc:c6:52:d3:94:44:04:9c:
87:df:0e:47:a8:b8:3e:28:c3:82:3b:32:54:fa:8f:
48:90:c4:18:f4:85:34:53:7c:1b:90:f2:6a:80:26:
e7:e7:e6:e5:e2:d0:8a:54:22:96:df:2b:79:9d:7f:
ef:78:44:3d:bb:ec:ae:63:33:c6:67:e6:76:43:ee:
38:d2:88:ef:59:10:6a:2d:61:ed:1c:87:80:59:98:
91:17:7d:b8:47:8b:f7:c3:a6:ce:b9:d9:03:0a:39:
05:e4:a9:a1:85:f8:b1:31:80:2c:1b:79:b1:ec:2c:
1c:e1:0e:a1:b4:22:c1:d2:32:02:fd:01:6d:9e:96:
8d:a1:4a:f3:a5:e3:a8:63:d5:30:ea:a9:e1:35:80:
91:80:25:c9:eb:6b:73:40:07:89:34:64:c3:15:a9:
31:d0:07:70:94:97:6f:be:7c:6f:dd:2c:18:fa:ae:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:E8:E8:34:0C:2E:A1:DB:B4:29:E0:45:53:B5:23:25:B1:BC:C5
X509v3 Authority Key Identifier:
keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:ac:3b:c1:8e:0c:ed:9c:b1:09:55:8c:d1:aa:e2:10:0b:
47:a6:6f:7b:49:c2:89:63:15:61:36:e0:1f:ce:d5:f0:3a:75:
55:b9:e9:1a:57:0e:93:0d:a2:3b:3d:7a:85:33:87:40:e8:ca:
37:0a:32:19:71:bf:1f:da:5c:12:5e:54:32:50:f3:1a:0c:24:
81:29:4d:71:a5:80:0d:67:e2:56:d1:da:66:05:3b:47:b0:7c:
4c:4c:9a:50:29:db:65:1a:26:95:da:a8:4f:5e:a9:97:e4:1e:
ed:0e:7d:01:75:95:2d:28:02:56:16:b1:bf:90:07:c1:d5:7f:
28:0e:0b:34:2b:0b:16:ac:45:0c:e6:3b:9c:6c:a8:f2:d4:ca:
10:5c:ae:a9:1e:b4:20:1c:85:88:cf:ba:0e:57:45:f1:f3:74:
46:68:cc:50:32:84:f1:40:5a:a5:c8:44:c2:05:30:27:a8:0b:
01:02:50:65:15:d4:0e:b7:00:ef:1f:a1:0e:e4:46:ff:5c:10:
13:99:f3:64:89:02:34:f3:a9:c2:d8:3e:c3:61:73:e3:dd:42:
a8:9c:f8:a3:80:94:7c:86:ec:3e:f7:0f:0a:f8:93:cf:ca:c9:
64:5b:43:ce:4f:15:82:65:95:d7:d2:de:cc:0e:4a:d9:1d:41:
0c:c2:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client