Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: 6Tt2qqWNxEAHsoReILm10rylpjjIWFEwpZBGLNp22jI=
Subject key identifier: 69:0C:23:8C:7A:BE:8D:2E:37:F9:85:4C:0C:12:1F:C7:D1:A6:09:81
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 0199240C918F6A9A54D76034A251F7ED85EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 12:00:27 +0000
Manifest this update: Sun 07 Sep 2025 12:00:27 +0000
Manifest next update: Mon 08 Sep 2025 12:00:27 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: Lwv73D0u+/S+gQTvLQo0o0vp/S8dSxS1VxeDcU6BfYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:91:8f:6a:9a:54:d7:60:34:a2:51:f7:ed:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Sep 7 12:00:27 2025 GMT
Not After : Sep 8 12:00:27 2025 GMT
Subject: CN=690c238c7abe8d2e37f9854c0c121fc7d1a60981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:43:ba:8a:30:2d:56:8c:e5:d9:dd:e3:a9:9e:
3a:d6:f6:b6:c2:9a:ee:90:56:41:60:48:ab:63:5c:
a6:2f:e0:28:41:c9:af:0a:b5:52:28:2a:fa:e4:b3:
91:db:27:ac:0a:0f:63:a1:70:7f:f7:1f:e6:19:f4:
6b:a9:7a:87:fd:a9:9f:12:86:23:64:3d:a3:fc:f6:
2e:c3:8f:d5:f1:4f:af:fc:8d:c8:91:2a:5d:32:48:
42:b3:d7:73:6a:02:ad:63:1e:28:8e:15:12:9a:43:
21:0c:81:4f:62:34:be:b0:9d:0f:f9:53:b1:09:44:
63:22:c2:41:60:9a:e3:eb:79:81:91:86:aa:cd:e7:
43:cd:c9:f0:d4:18:ba:33:b3:4a:26:ec:88:6e:42:
8d:f2:6e:0c:cd:92:b8:f5:28:b4:3d:6b:3b:2f:4e:
21:fc:62:05:e9:16:5a:4e:af:47:49:c3:a2:53:8b:
f5:50:8a:bb:c6:9f:94:a6:3e:53:16:20:a0:a1:6f:
b1:c9:30:23:09:54:b0:e9:6d:68:e9:9a:9f:d0:20:
6b:25:ac:ab:d2:b2:34:f3:90:99:48:fc:56:ab:0a:
8b:28:d2:02:63:e9:79:2d:8b:74:34:24:77:15:fd:
c8:56:82:af:cf:0c:46:75:1f:bc:f5:2c:15:f8:5d:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0C:23:8C:7A:BE:8D:2E:37:F9:85:4C:0C:12:1F:C7:D1:A6:09:81
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:a6:67:5d:a2:22:0d:c8:57:10:da:e3:94:90:22:d9:61:
a0:06:73:c5:c0:e8:da:1d:30:fe:65:d4:dd:2d:55:ef:29:5a:
0c:e3:f0:00:fa:1a:98:fa:1d:37:04:be:24:dd:56:3e:16:12:
17:85:ff:ff:c3:5f:d8:f2:3d:30:6f:9f:d2:5d:20:c0:04:1f:
3a:48:1d:b3:0c:29:f9:a1:85:f7:ca:49:eb:53:a3:c9:ef:b3:
5e:12:97:1e:55:a9:09:ed:f7:bd:19:d6:71:56:03:ec:9c:7d:
af:f5:85:a8:47:7a:23:66:86:0d:8b:b6:97:d6:63:4c:93:cd:
d8:8f:a4:01:97:6c:81:eb:a0:45:89:e6:53:39:1f:79:9e:1b:
88:50:a8:fb:f9:68:96:c5:ed:0e:5a:38:45:af:dd:64:70:f5:
e8:cb:e1:c7:86:d4:0b:dd:53:91:83:d3:a1:75:a8:d6:76:cb:
9a:2a:fd:46:93:5a:fd:ae:26:46:d1:d9:0a:79:d1:b0:c4:3c:
0d:ad:c1:ad:5e:e6:35:8c:dd:cd:fd:07:c8:d0:46:97:36:84:
91:10:63:01:35:7b:18:43:77:2a:a8:f9:ef:c9:63:6a:ab:41:
14:80:db:e1:fe:58:81:b4:cc:1d:d9:87:ca:76:96:de:2a:ed:
44:a2:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:46 2025 by rpki-client