Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: QS4tWBCTbIs9r5sk/1UWOsW4IDdMa/CGCvDam7vOAU0=
Subject key identifier: C6:77:88:8A:CA:DE:8B:24:CB:69:2B:F8:52:20:97:9E:FA:8F:BD:6A
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 0197CC4D225324DF1E304CC09F7D6052B167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0EE3
Signing time: Wed 02 Jul 2025 18:01:36 +0000
Manifest this update: Wed 02 Jul 2025 18:01:36 +0000
Manifest next update: Thu 03 Jul 2025 18:01:36 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: fYvIvujf5/zTcKdz2WkBECbwBQzSvt+7TQvOGLekv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:22:53:24:df:1e:30:4c:c0:9f:7d:60:52:b1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Jul 2 18:01:36 2025 GMT
Not After : Jul 3 18:01:36 2025 GMT
Subject: CN=c677888acade8b24cb692bf85220979efa8fbd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:a7:17:d4:99:98:c6:a6:2f:f8:b8:4b:c1:
34:93:8a:65:7b:fa:eb:6b:15:e1:df:b3:7c:73:9f:
b0:37:6b:fd:e4:ba:92:8f:09:b7:b2:67:15:83:5f:
56:23:aa:71:db:90:0a:d5:b2:f1:ee:50:a6:38:2e:
32:fd:1c:53:c2:5f:72:50:8f:73:df:5b:f4:cb:39:
26:46:d6:86:51:a5:e5:c4:ca:27:68:f0:41:5c:69:
9b:04:16:d8:b8:c9:58:8b:58:16:bd:b7:91:af:48:
ea:8d:04:91:a0:5a:bc:3b:a3:6c:b8:00:ee:41:2a:
7d:27:a9:cf:84:d1:85:b1:c6:8c:ca:40:5c:ad:16:
23:d6:08:a4:44:9d:97:d0:58:fd:94:c8:07:1c:f1:
aa:46:80:cb:b9:49:55:ff:04:4e:1f:6c:c1:7c:94:
5d:ee:6b:26:5e:4a:e7:b3:57:b4:dd:75:89:6a:46:
e7:5f:75:88:49:a3:3c:33:d7:d4:d4:1e:16:36:8a:
f5:77:af:29:7c:95:8c:44:2c:c2:d7:2c:0e:7a:2b:
2f:72:ef:fb:a4:bf:22:74:12:59:bc:fe:de:06:41:
bc:fa:3e:a9:f5:09:71:19:6f:bb:d7:89:f8:cd:c9:
f5:76:95:0c:62:d9:f7:8a:2c:1b:a9:60:25:46:03:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:88:8A:CA:DE:8B:24:CB:69:2B:F8:52:20:97:9E:FA:8F:BD:6A
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:77:47:d1:01:df:29:18:fc:29:86:e5:b1:d8:7a:1e:88:30:
8e:80:6e:fb:bb:43:85:6f:b4:5d:ef:2c:06:a9:31:14:6e:a5:
fe:9a:8b:dd:35:ea:af:c7:d4:d5:3d:9a:46:67:ca:4e:6b:33:
05:40:b8:b5:7c:b7:c0:b2:0d:a2:f1:72:74:36:a4:c0:07:78:
85:f0:a6:3f:91:4a:5b:e1:15:56:0b:22:ff:07:93:38:74:04:
e8:3a:44:37:03:e9:97:99:b1:7e:57:ca:dd:f3:d9:40:b4:22:
cd:82:dd:5b:e0:0e:68:9b:42:be:56:d9:35:7b:0a:9e:06:77:
6f:1c:7e:19:4f:c2:37:32:bf:c4:a8:14:74:d8:bc:87:45:2b:
aa:9e:71:a8:26:15:bc:d4:14:e4:bd:58:ed:cf:2a:66:4a:d7:
a8:30:19:86:b0:e0:14:49:14:9f:34:3a:1c:27:5e:f4:4d:0d:
11:2a:8c:59:46:37:4a:91:69:68:25:5a:e9:48:25:8e:f9:a7:
b1:7d:0e:b6:4a:9d:a1:3d:d5:70:4e:c4:2a:1c:18:57:9a:71:
6a:25:a4:a0:22:60:03:db:03:61:db:99:fb:16:fb:3e:61:87:
c2:3f:6f:0f:7b:b7:db:cf:7b:10:25:de:3a:fc:09:03:68:67:
15:72:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:51:38 2025 by rpki-client