
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: rRbbQxg+9UeNry80eR4vPoYZVjkQG+IiZrdP0JKRkcQ=
Subject key identifier: A2:D4:D8:00:3F:46:E1:F4:13:36:A3:0B:07:B8:33:9D:C9:90:4D:57
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 01974B8D523C3E678EC6D9A3CAB3D0DCFFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 04FF
Signing time: Sat 07 Jun 2025 18:00:42 +0000
Manifest this update: Sat 07 Jun 2025 18:00:42 +0000
Manifest next update: Sun 08 Jun 2025 18:00:42 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: qRsNGWx4furusAJJM2aH3xCz2mzh6XdFbQrjIb/Csm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:52:3c:3e:67:8e:c6:d9:a3:ca:b3:d0:dc:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Jun 7 18:00:42 2025 GMT
Not After : Jun 8 18:00:42 2025 GMT
Subject: CN=a2d4d8003f46e1f41336a30b07b8339dc9904d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:b9:21:0c:cb:4b:21:e4:88:6f:1c:45:31:
d4:76:bc:09:e7:d5:67:b1:e2:bb:df:7e:bf:de:1d:
a7:04:ab:7b:fd:fa:e9:05:cc:46:27:be:70:d4:1e:
40:81:5a:a6:75:47:9c:8a:09:b4:fe:1c:18:97:a2:
b9:1c:ba:7f:e6:42:ce:f2:18:44:2d:dc:a6:8d:ea:
02:fb:ee:af:b9:1d:5e:27:f5:8f:5d:eb:9e:0a:b5:
8d:23:d5:06:f1:13:20:74:dd:ec:64:f6:4c:4b:7a:
8d:ed:98:77:fe:16:9b:1d:77:bf:da:a5:5d:e1:8e:
ff:2d:1b:49:d4:24:04:10:07:77:f8:1f:74:5d:3d:
f2:e7:3f:01:3e:36:0c:d4:53:8e:88:8f:87:82:e3:
bb:ba:10:50:b1:5d:46:d6:ec:59:b6:8c:9b:0a:c6:
61:a3:04:f3:7f:5c:d6:61:08:d4:19:8c:03:95:2a:
dd:9a:56:dd:e9:9b:ae:59:f0:e7:3a:7f:fa:22:5c:
c2:94:c0:f1:32:5d:41:23:bd:e1:6d:f5:fd:10:27:
c6:9f:e3:d9:97:d9:88:b9:6f:47:4a:43:ce:b9:13:
bf:34:0e:29:54:40:ee:6f:82:f6:73:69:63:60:33:
19:a9:eb:19:31:f2:34:e9:2f:a6:81:77:7e:43:91:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:D8:00:3F:46:E1:F4:13:36:A3:0B:07:B8:33:9D:C9:90:4D:57
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:55:7d:55:fa:91:7e:0e:55:5f:b5:11:fa:a3:01:1f:70:
94:d9:ae:e4:f8:dd:0f:80:b7:ac:26:10:75:a3:8d:33:7f:9b:
c4:34:3b:5b:1a:5a:f1:2a:aa:0a:75:ee:a6:df:cc:bd:f8:67:
af:ff:ee:3b:3f:ce:a2:48:e8:46:3d:5f:e9:ce:57:59:fd:9c:
93:04:d8:5f:ac:2c:4b:1d:cc:e2:7e:67:dd:71:14:0b:d4:e3:
0e:3b:84:c8:64:0a:61:57:6e:e5:e3:26:29:7d:12:ef:98:d7:
e3:6e:aa:a8:df:23:be:b1:2f:40:7f:45:9c:f6:e9:7c:62:54:
fa:77:00:37:7a:cb:41:4c:96:22:23:e3:85:9c:79:7f:5d:69:
27:d0:2e:72:da:32:ca:74:af:37:9e:7a:68:ec:d4:95:dd:44:
b6:d0:88:82:fe:f7:fd:ad:81:f0:40:a4:ab:eb:74:93:a9:f4:
fa:c7:43:04:77:7d:92:90:21:46:8a:be:92:ae:7a:7e:f3:42:
54:b8:e6:84:54:63:d1:1b:2f:d2:a3:b5:53:96:b1:c0:cd:ef:
04:9f:ce:c3:40:76:c1:c2:65:c7:98:3e:8a:98:36:c9:39:6b:
c9:ff:d9:d9:df:c2:af:82:0c:7a:7f:a0:05:1b:86:f7:b5:3d:
8d:fb:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:10 2025 by rpki-client