Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
File: lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json)
Hash identifier: Bf4x4MCuzCsGOuAeBVG+77wXyVYi9ZmiiN3fu/I+cuY=
Subject key identifier: 76:AF:15:3F:B3:82:8A:20:E1:45:6D:54:F9:FA:4A:5B:00:2E:EB:94
Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Certificate issuer: /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Certificate serial: 0197C9F120B58A77811E7FCB07490AD8FD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
Manifest number: 12F6
Signing time: Wed 02 Jul 2025 07:01:52 +0000
Manifest this update: Wed 02 Jul 2025 07:01:52 +0000
Manifest next update: Thu 03 Jul 2025 07:01:52 +0000
Files and hashes: 1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: rv19OPsrSzdDGh0+aYlhh4NUHEE7FqCQI0zZCyAdQIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:20:b5:8a:77:81:1e:7f:cb:07:49:0a:d8:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Validity
Not Before: Jul 2 07:01:52 2025 GMT
Not After : Jul 3 07:01:52 2025 GMT
Subject: CN=76af153fb3828a20e1456d54f9fa4a5b002eeb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:41:8e:1a:9a:19:23:10:c1:b8:00:db:a7:
8f:87:eb:f4:5b:3e:db:95:a9:ac:8b:4f:fb:16:3b:
f0:ec:5d:6c:9d:d5:2d:73:2b:3c:90:ae:83:38:5a:
84:c7:7c:4a:74:d7:bf:a6:68:f1:0b:7a:c7:fc:3a:
55:2d:89:4e:85:0c:ae:1d:ba:d5:03:21:58:f0:3b:
42:a2:a5:f6:9c:68:71:aa:87:86:c9:d2:cb:8b:74:
9d:f3:26:6a:38:4f:51:4e:a3:43:05:6e:17:34:93:
cf:c4:50:e3:3a:bd:68:1a:97:0d:ae:2f:87:37:34:
b3:e4:ce:29:7b:8d:89:71:64:7e:69:48:bc:26:c2:
f3:f4:d6:71:1a:08:18:11:9f:08:17:e9:af:7c:e6:
97:4a:c7:f1:87:d9:01:d9:9e:60:92:df:0e:56:64:
03:cf:fb:e7:4b:d9:f2:72:45:53:a0:3e:76:04:b4:
a0:9d:87:53:fa:ab:d8:0a:a2:86:5c:e1:cf:c8:ae:
4b:a8:88:83:5b:28:4c:46:c1:bd:c9:db:82:a9:96:
0b:1f:a2:4c:bc:2c:86:44:0c:06:02:1e:32:75:b3:
85:d0:a7:ea:e4:80:e5:59:f7:5d:a3:e3:9a:c8:59:
86:4e:f9:d3:3f:14:9d:3f:7a:33:61:de:a4:77:67:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:15:3F:B3:82:8A:20:E1:45:6D:54:F9:FA:4A:5B:00:2E:EB:94
X509v3 Authority Key Identifier:
keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:4e:97:4d:d4:da:9f:2c:30:44:12:21:1c:ac:53:ea:12:
d8:05:25:13:64:04:7f:c2:93:05:2c:1e:20:38:11:d7:15:1a:
60:e7:ca:92:e3:aa:26:72:14:1e:e3:e7:9e:ec:af:85:13:78:
0e:5e:d1:32:02:ff:27:45:b9:12:7f:d3:52:c0:e0:1c:e6:d6:
c6:5d:97:58:56:6e:a4:5a:44:20:71:a7:ec:15:de:2d:dc:2c:
32:41:bd:cb:25:e0:98:5c:25:71:c7:08:c4:82:4d:96:9b:de:
70:20:36:bd:be:86:04:4e:32:e4:64:4e:74:5e:0d:7b:e4:b7:
ef:2c:1a:f0:e5:6f:72:98:5b:82:d6:55:f3:a2:7e:ad:9f:9d:
46:0c:f0:b5:51:d3:74:e3:bd:a1:b7:1c:df:cd:02:db:fc:4c:
b5:52:9c:80:4d:2b:e2:7e:c5:45:b8:95:39:72:5b:c5:b2:ce:
39:2c:88:a5:00:fb:1e:d4:70:4d:3c:cb:d7:b8:d7:aa:11:f3:
4f:5e:30:06:0d:6a:69:bb:11:97:8a:d9:58:c5:e3:a3:79:da:
a1:95:38:0a:72:54:ac:7d:c1:e6:8f:07:13:68:c5:89:3e:b9:
06:e5:21:94:fe:a6:57:69:85:41:be:90:33:fa:e0:47:c6:01:
7b:a0:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:20 2025 by rpki-client