Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: BV/xjLU1tjE0r2nRlxCIzOv0vCE1W1rznvcKEtrZwdQ=
Subject key identifier: 24:C4:22:F4:21:A4:C9:8D:AC:22:DC:6D:6C:7B:3A:70:31:A8:F6:62
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 0197B8C5E0B4B8FD69E932705F4EC2FA43FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 048A
Signing time: Sat 28 Jun 2025 23:01:05 +0000
Manifest this update: Sat 28 Jun 2025 23:01:05 +0000
Manifest next update: Sun 29 Jun 2025 23:01:05 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: 9RhLkmrtiXMwq5I39X/WnWgEI5lbrfBeR8mk6QiBmy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e0:b4:b8:fd:69:e9:32:70:5f:4e:c2:fa:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Jun 28 23:01:05 2025 GMT
Not After : Jun 29 23:01:05 2025 GMT
Subject: CN=24c422f421a4c98dac22dc6d6c7b3a7031a8f662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:ae:50:51:f9:60:03:39:52:d7:76:1b:92:
cb:a5:72:6d:a7:64:e8:38:38:e0:45:5a:31:12:88:
55:01:a6:fb:8d:eb:60:51:59:57:dd:a1:6a:5c:79:
a6:1a:b8:c8:d1:ba:ab:59:e5:d1:62:fd:03:63:c1:
27:3f:7b:56:8a:71:f7:f5:39:33:89:4e:1e:c4:a1:
a9:6a:57:de:0e:61:d6:f0:fc:d3:85:f4:5d:9c:77:
ae:36:a6:32:31:1c:cc:1a:db:97:84:e5:12:25:ce:
f6:08:c7:76:03:34:55:ad:49:83:f0:24:42:cd:a3:
af:d9:6f:1b:3f:e0:fa:3e:7f:38:d3:df:53:07:08:
fe:9d:36:d7:12:d4:17:72:07:15:cd:68:b0:41:f8:
39:45:08:e0:29:99:66:ea:d4:93:13:0c:59:c2:59:
fb:8d:da:b5:5f:f7:ce:2d:a2:36:b7:c6:8d:e4:96:
d6:93:b4:72:ff:0f:44:d9:86:7a:ef:94:27:17:d6:
7d:c5:1b:07:75:72:ba:3f:3f:51:a0:30:a3:12:4f:
6b:c4:1f:d8:19:3b:2f:9d:de:57:5f:50:68:eb:fa:
8a:54:66:87:bd:cf:3e:06:f5:d1:59:be:f4:0b:9d:
e6:07:31:46:35:40:6a:72:36:2f:59:92:01:b6:74:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:22:F4:21:A4:C9:8D:AC:22:DC:6D:6C:7B:3A:70:31:A8:F6:62
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:3c:3a:2f:60:13:a1:68:ed:4a:62:7a:f3:02:3c:44:38:
da:8d:ea:9e:01:16:c7:cd:bc:5e:4c:c3:9d:aa:24:8b:5b:f6:
8b:c1:b4:95:9a:0a:d6:b2:d3:86:05:3c:65:8a:ef:1f:5f:b6:
7b:14:ff:16:c7:74:d5:f1:cc:c8:86:ab:ce:72:4e:7d:86:bd:
72:cc:a0:e5:74:be:6f:90:a7:76:60:52:c6:f2:da:d2:d6:39:
d9:45:ad:a5:e3:a8:28:11:11:0a:fa:e9:80:8d:84:22:68:6e:
e8:0e:dd:a7:e8:37:95:e7:f6:00:1e:a7:5e:95:f4:cf:5d:7e:
ff:9a:6e:b3:e5:6e:ed:23:f9:a7:75:93:9d:20:01:26:50:46:
7d:9d:38:d2:41:9a:f0:ac:73:b2:90:51:31:b1:d7:8d:87:53:
0a:eb:b0:fd:91:91:5c:36:bb:23:d8:41:c5:97:78:cb:66:a8:
2f:7c:6b:c6:42:46:dd:3c:1e:de:b5:89:5a:33:07:59:1f:0d:
19:8a:1a:a5:7d:93:e3:da:d9:2a:cf:20:93:8a:e3:f3:d1:31:
cc:45:0c:5d:c6:90:3d:ee:d8:a5:ef:f7:97:a3:89:4d:7c:8c:
72:be:95:ca:dd:21:f4:51:5b:06:01:16:f3:45:70:bd:5b:a2:
f2:8b:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:33 2025 by rpki-client