Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: e/7m5isG0cem0JSkgli7Bd2r86xpNWgWUN2lxlqoYt0=
Subject key identifier: 97:7F:75:5D:FB:9A:17:6F:F5:92:4B:EC:73:59:D5:15:FE:AC:7A:81
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 0198D697EF6FA474802FE97BEF8B125A2850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 051E
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: M2wxZkHk9qhRLst3l4o+r6StJZIs4R9pVfNUZ/6b1lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ef:6f:a4:74:80:2f:e9:7b:ef:8b:12:5a:28:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=977f755dfb9a176ff5924bec7359d515feac7a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:55:b9:e8:ca:45:ae:76:b3:19:eb:f2:fa:
68:99:42:a4:df:3f:81:25:ef:de:18:f2:c7:73:91:
25:a2:92:74:a2:43:02:e1:a4:0a:3d:1e:14:0c:76:
79:5f:2b:9a:ec:2d:d5:62:cb:e6:f8:19:16:93:9f:
7d:f3:4f:3a:33:b9:5c:ba:02:bf:db:a7:11:60:e1:
61:e3:04:3e:fe:20:55:c3:d9:9b:ae:52:64:d2:f7:
b5:ea:aa:14:74:99:e7:bf:3c:2f:9c:22:3c:d0:47:
5c:c5:7a:1f:8b:23:8c:1a:87:1f:1c:1c:73:7b:87:
f5:aa:f8:e3:ab:29:45:ed:31:fe:ee:79:1d:88:8a:
5a:3a:f7:fb:98:20:ef:0b:8c:7c:88:99:a2:be:9e:
34:95:69:84:85:d1:8b:61:5e:b9:4b:f3:8d:8b:41:
39:c3:ce:0f:e4:34:5c:fb:03:6c:54:de:47:cd:a6:
99:6d:14:82:e7:b4:4b:9a:d3:07:cc:2a:21:0b:1f:
71:84:e7:8d:b3:62:d1:47:e4:1f:62:ee:11:37:10:
72:96:f7:c8:eb:56:ce:9a:90:8e:38:88:be:86:c6:
eb:70:9d:b2:be:35:aa:35:67:00:46:5c:b6:aa:a6:
fc:4b:f2:ef:77:8f:f7:e0:f7:6f:31:59:c8:b3:fe:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:75:5D:FB:9A:17:6F:F5:92:4B:EC:73:59:D5:15:FE:AC:7A:81
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:de:30:b2:98:85:2f:b7:b9:1c:3a:d1:4e:e6:22:c7:51:
20:f4:f3:bd:24:bc:df:f8:a0:65:20:b6:d0:6d:31:68:32:50:
44:19:72:b9:6e:89:47:9b:50:aa:82:ec:35:b8:ce:9c:80:6f:
d5:90:b5:e9:8b:81:ed:44:c7:16:97:92:16:fd:49:b1:71:bf:
ff:af:cc:83:46:04:33:97:96:14:db:2d:59:8a:9b:6a:a0:9b:
96:aa:e7:ba:e6:27:ad:d5:a3:57:06:4e:7d:d6:bc:e7:65:f6:
e1:00:12:0c:13:4d:c3:73:96:66:72:d7:82:ac:d7:3c:24:3b:
3e:7e:3c:f7:22:49:f3:f4:9f:47:55:14:b5:de:38:95:ee:9c:
d5:ad:13:fa:2f:3f:ad:88:bd:24:3e:1f:98:f0:97:b0:09:9b:
65:01:d0:1e:85:98:18:a2:c1:63:89:d3:3c:9d:a6:73:0d:86:
87:39:9a:1b:4b:bb:f3:89:19:34:c8:e9:16:24:05:79:c1:a6:
bf:96:b3:ef:83:33:26:50:f7:76:a6:99:bc:f0:a9:76:1c:17:
fc:96:70:68:4a:0c:58:87:d6:4b:1f:ee:f1:06:94:4b:eb:99:
d4:a7:68:38:67:24:d2:b3:2e:53:ec:38:d6:b4:38:cd:40:b8:
aa:97:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:21 2025 by rpki-client