Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: vE/Aebohzxz5npbrn3eNplFSV/8vaRc+/aiqE9dNF5o=
Subject key identifier: 62:98:4C:2C:3A:DC:C0:AD:0C:6B:BA:7D:42:19:9A:D2:CC:50:71:61
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 01974742DEF9CF27A2C77407748A29ADEDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: 0231
Signing time: Fri 06 Jun 2025 22:00:54 +0000
Manifest this update: Fri 06 Jun 2025 22:00:54 +0000
Manifest next update: Sat 07 Jun 2025 22:00:54 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: rwJ5a1zfRVtXBB/kV+wCtxH14fEoqfzJgUEULRugF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:de:f9:cf:27:a2:c7:74:07:74:8a:29:ad:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Jun 6 22:00:54 2025 GMT
Not After : Jun 7 22:00:54 2025 GMT
Subject: CN=62984c2c3adcc0ad0c6bba7d42199ad2cc507161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:17:67:aa:bc:85:56:0a:97:ea:19:48:eb:
78:3a:38:f3:8e:60:bd:09:02:1b:a9:9c:92:f6:eb:
17:0d:c5:e9:9e:0f:ff:74:fb:38:25:2c:b8:17:93:
47:42:39:f2:b7:89:b2:0b:9e:e8:b0:ba:98:24:c0:
7e:56:c9:0d:70:21:41:11:67:3b:70:1f:88:08:11:
14:df:ca:d8:01:58:9e:d7:cc:2b:58:7c:c9:3e:20:
4e:17:ed:00:fb:c4:08:ef:dd:eb:60:5b:ff:33:19:
19:29:94:b8:2e:e1:63:3f:a3:fb:83:24:a1:b6:30:
6d:5a:c8:72:ef:e0:3e:a0:e5:47:1b:a7:d2:16:e9:
02:5d:6e:89:b2:1f:4f:60:f9:46:e8:fe:1d:ce:28:
8f:a6:2e:f4:a3:fa:f1:11:26:99:fe:a8:c5:df:9d:
05:8d:3c:f9:28:77:49:5e:14:b8:ee:6b:53:56:9b:
7d:5b:30:b7:71:f0:ea:d3:43:49:77:d1:e8:af:4a:
ce:07:cc:ee:61:b3:0e:63:8d:bd:37:84:8a:43:29:
7e:c4:c0:49:c0:e6:2f:6f:3c:f5:3f:86:31:24:f8:
c2:9d:1e:6b:a6:a0:2b:fa:66:02:5c:f8:59:a1:ed:
37:fc:3f:2f:dc:45:c2:25:64:95:ab:7d:0b:52:04:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:4C:2C:3A:DC:C0:AD:0C:6B:BA:7D:42:19:9A:D2:CC:50:71:61
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:fc:17:5c:39:e5:82:47:91:d1:35:6c:da:01:f7:17:16:
1d:91:d2:f8:e3:14:4d:94:bd:42:06:5d:3d:95:18:fb:8f:58:
c2:f3:17:d4:6c:97:af:62:1c:68:0e:11:ba:12:8e:ed:49:24:
43:b1:33:db:e7:4a:e5:a5:80:82:69:44:07:a6:58:ba:e5:f4:
2b:2c:1d:39:ed:05:a5:e3:c9:d0:96:cd:58:d4:82:95:77:45:
e4:26:33:20:de:8b:26:e8:cc:18:ff:da:4e:c7:27:6f:b4:50:
61:86:ba:9c:b3:94:97:84:4a:92:d5:3d:72:d3:e6:f4:80:57:
81:d2:fb:91:da:e5:6b:a4:94:c7:7b:a6:0b:0c:7c:58:94:9d:
d8:01:6a:81:62:f5:a8:2a:02:69:43:d8:64:4a:2c:79:f3:6c:
47:66:48:6e:f2:29:87:27:72:ab:8f:95:ac:4f:7a:cc:a8:16:
ac:e4:d5:fe:56:85:ef:af:19:e9:cb:2c:61:00:da:34:46:ec:
5b:c2:37:8b:7d:39:b0:61:4b:f7:72:af:60:11:2c:5a:21:5c:
85:ef:5a:96:3d:25:d3:76:0e:0b:2e:12:06:b9:f2:81:07:9c:
9c:dd:5e:98:ab:1e:39:99:92:7e:af:79:50:b6:58:7f:6d:62:
44:69:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:44 2025 by rpki-client