Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: L0hhkqREQtewa5EK3Jo18JCswgqh0JY/37+l0dZoEX8=
Subject key identifier: 54:44:26:58:C5:63:D0:AC:45:0E:55:7B:D4:1F:66:17:77:BA:30:60
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 0198D47482D22FD9152BD3C02D156C1A8844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 015A
Signing time: Sat 23 Aug 2025 01:04:22 +0000
Manifest this update: Sat 23 Aug 2025 01:04:22 +0000
Manifest next update: Sun 24 Aug 2025 01:04:22 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: Mj6euY2k5KEcNUQ99kiHCgBleYrKMvc37tUc/o9bumw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:82:d2:2f:d9:15:2b:d3:c0:2d:15:6c:1a:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Aug 23 01:04:22 2025 GMT
Not After : Aug 24 01:04:22 2025 GMT
Subject: CN=54442658c563d0ac450e557bd41f661777ba3060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:c3:65:f5:09:8c:9c:66:0b:a4:c8:98:a2:
09:3e:f0:1d:94:34:3b:54:68:6d:15:7c:60:18:a9:
ef:e1:5b:c4:38:ff:94:a3:e2:39:7b:b5:c1:87:cb:
ba:80:c3:28:b6:3e:9d:b3:b3:84:65:42:3b:8d:c9:
0f:6d:dd:b7:a1:9c:62:6e:2b:fc:ad:47:4c:75:0e:
22:a1:70:e6:de:3b:5d:47:98:c5:ed:03:17:52:1d:
6a:d4:76:b6:e7:82:c6:a8:c5:b1:1e:4d:34:5f:93:
9f:7d:14:2e:a4:9f:37:29:04:70:02:13:70:9d:66:
9a:87:c3:fd:85:83:b0:2c:9b:25:05:fd:f7:0f:f6:
a0:3e:9c:55:f1:a4:24:42:8d:44:eb:98:ce:34:5a:
02:9b:81:f6:fc:e0:b9:1d:7d:19:75:e8:f0:51:4d:
b8:05:d0:32:db:d7:ff:a3:dd:60:dd:e8:b5:c2:2d:
64:07:24:cf:67:98:03:ca:27:a1:20:42:53:16:2e:
d6:2d:23:f4:78:96:d5:cf:62:6b:1f:15:46:5f:12:
a0:06:4c:aa:94:29:3c:45:59:65:fb:f9:0c:2d:5e:
e1:a4:fd:46:a9:68:84:69:8c:af:de:15:1e:3d:e8:
55:31:93:70:9e:3d:6e:90:20:1d:9c:71:02:ef:34:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:26:58:C5:63:D0:AC:45:0E:55:7B:D4:1F:66:17:77:BA:30:60
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:a8:19:8d:fa:78:7f:da:db:25:0d:77:a3:32:ff:18:85:
6e:1f:87:7b:20:f6:ff:b3:cb:41:b5:31:72:77:b8:e3:dc:fe:
ce:c4:51:25:05:b4:e9:58:67:ca:e3:d1:04:23:b4:5b:cf:2d:
e0:b4:70:9a:f3:9f:0c:b0:e9:6e:6e:1b:7b:87:5f:7e:ee:6d:
01:ad:95:17:70:a2:52:8f:b4:54:b1:25:54:03:77:d7:04:ec:
7d:bd:32:23:d1:92:b0:99:c0:0c:94:34:67:9c:fd:ed:f6:73:
87:50:ad:63:9d:ff:ed:ff:7f:99:2f:d8:63:7d:5c:2e:59:eb:
b2:11:36:bb:5c:19:71:0f:f8:b7:39:ac:fe:26:d8:df:54:6b:
13:ee:ba:a8:35:8f:25:2a:19:dc:05:f7:c3:7c:33:03:e4:34:
45:c1:0b:e2:38:d5:02:c7:50:e0:e5:d5:79:c2:d4:58:d2:ef:
da:a5:9b:8f:60:99:cf:90:ee:b0:aa:8d:51:5f:c3:73:29:98:
d6:20:e6:92:0a:df:dd:1a:79:c2:e1:e0:50:d2:ea:bb:d1:9a:
b5:df:6c:e9:2b:86:43:cb:cf:c9:a9:4b:07:bc:8a:4d:62:18:
b9:da:2c:4c:60:67:2d:38:6c:86:78:cb:b6:01:d9:24:ed:6b:
e5:fd:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:16 2025 by rpki-client