Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: 8IgZ8wmbYzpKjElmTn39/fffeQobUeZGKoT77vOZkQ8=
Subject key identifier: 4E:0D:71:1A:DA:9E:17:DF:85:5A:3F:A6:9B:80:71:32:1F:9A:7E:20
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 019922551B4B9DAD1AB26A7B78D6C432DB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: 0327
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: yfl9Ugl0jAJuMGA1iLk3AUlg3Nghn52bmLyD2miR94E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1b:4b:9d:ad:1a:b2:6a:7b:78:d6:c4:32:db:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=4e0d711ada9e17df855a3fa69b8071321f9a7e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:c2:fa:6e:2a:09:50:7c:3e:a3:78:0b:c7:
5e:51:1f:92:a1:57:c2:83:9a:0b:00:99:95:fb:40:
57:34:ab:0e:5a:e3:c9:50:13:25:3d:a1:2c:e6:b4:
b4:76:2e:ba:c3:f8:96:c9:1c:84:0c:fe:63:52:7d:
b7:c8:f9:7e:13:26:54:c4:08:b1:d8:b2:88:e7:a7:
60:9a:65:09:01:51:ce:aa:10:7f:3a:a2:e8:0d:6b:
2f:be:be:1b:7d:b1:42:a7:05:98:a9:29:ee:42:d6:
0c:ac:3b:02:8e:14:64:02:fd:c7:de:b7:12:7a:9e:
6b:4e:f6:57:f9:75:c8:29:bd:68:17:4c:0f:46:87:
1c:a1:78:c5:0d:ff:39:db:85:23:cc:d2:7a:68:5b:
3a:9c:ec:d9:c1:52:77:9a:9b:7c:07:bd:f5:9f:bf:
4f:ce:62:3d:bc:cf:54:1c:1d:76:e9:cf:62:7d:1a:
e8:a2:99:13:ea:78:a6:1c:4a:2f:29:29:0e:37:c2:
0b:74:fd:83:bd:ac:07:35:1e:f3:22:87:5f:cb:4d:
f9:3a:d3:df:5d:4d:67:5c:4b:a1:5c:6c:61:8c:9b:
d4:1e:73:0e:95:e9:2d:be:f9:2e:4b:74:ce:2f:38:
12:f5:40:1d:30:06:bb:b5:b4:20:b4:4e:a7:00:a5:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:71:1A:DA:9E:17:DF:85:5A:3F:A6:9B:80:71:32:1F:9A:7E:20
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:74:54:7d:f1:5b:a0:90:f5:48:7b:6e:14:3b:df:3c:42:5f:
67:5f:bf:b3:a9:a5:ac:6b:5a:fd:e6:07:13:51:55:bd:4e:d3:
a3:1e:36:fb:bc:f2:62:e3:9c:bf:3c:f4:6f:78:e1:d5:f4:b1:
6a:ba:83:71:1c:34:a4:35:9c:40:56:aa:79:66:2c:b7:c6:50:
ef:1d:71:5d:ea:88:1b:c5:ae:d4:48:15:e6:19:c2:80:78:13:
ff:05:31:b9:54:23:ca:0b:62:7f:5b:12:b2:b6:cf:18:fb:45:
71:a4:a7:27:3f:9d:46:3f:fa:bf:64:fb:03:b2:f7:23:49:77:
99:95:bf:48:0d:50:a8:78:28:0e:04:2c:4b:a3:8f:f7:26:d8:
c1:ff:cb:40:fd:5a:ee:9a:8e:e8:5f:e9:3a:5c:e6:81:36:24:
42:a9:c1:dd:dc:35:6f:f5:ef:70:67:dd:6e:5a:0f:7d:cc:78:
05:23:e4:a1:67:74:a0:e9:e4:47:d9:6f:e6:70:a7:54:24:91:
15:9a:6f:d2:4e:dd:b6:53:45:d6:5d:38:3e:96:d7:d5:b2:2d:
94:43:0e:65:2e:52:43:54:61:f3:8f:5e:96:0e:45:10:0a:77:
fb:b8:3c:21:ed:ca:2f:02:76:75:a5:a2:d0:12:72:d8:34:75:
d4:26:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:23 2025 by rpki-client