Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: zdlYkd2YfbRusJ5mjKvIe2r5tb+05pEGu5Y/dyedztg=
Subject key identifier: 9C:3B:FE:D5:5E:D3:A5:2E:6A:A3:01:6C:7D:A3:A3:98:C4:89:E6:D6
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 0198D516380BFCA3E1D94B8A17FBA40CF56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 0538
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: Wuj7nYtANN9o7SPSLHog+FlRsJ45AcOlzd7Mjo4aYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:38:0b:fc:a3:e1:d9:4b:8a:17:fb:a4:0c:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=9c3bfed55ed3a52e6aa3016c7da3a398c489e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:fb:8c:f7:f0:48:9c:73:c2:7f:88:31:9a:
25:73:f2:88:d4:6d:86:70:09:ff:77:d5:95:87:77:
96:cd:36:57:13:6c:21:f0:78:06:cf:fe:ba:fa:79:
73:64:50:ba:da:c4:51:28:bd:7f:8c:36:14:77:f5:
71:85:77:3e:75:cb:f0:c1:dc:37:64:e7:e6:08:52:
4e:5f:6c:36:b7:66:c8:39:13:06:6d:5a:78:be:e7:
0e:59:48:97:61:7c:01:6c:62:02:fe:8b:e2:07:82:
41:ca:3f:93:24:07:62:69:34:c1:ec:38:d8:c6:08:
f0:04:2d:02:4d:e9:c2:43:76:95:5d:7e:5c:fa:71:
4a:3c:56:e7:05:c8:e5:16:b1:24:1e:1a:17:3c:ec:
7c:c4:78:5a:78:6f:f6:00:6e:98:80:d7:36:f1:39:
85:e9:25:7d:e2:e2:0c:ca:60:bc:53:fe:06:3c:cd:
91:aa:23:8c:98:3d:8c:74:6c:e8:ca:a0:16:03:54:
3f:93:a8:0d:0b:29:47:0d:f0:4d:58:b4:c6:7f:67:
9d:90:fa:eb:4f:2e:ea:66:2c:fa:d3:7f:b1:d2:76:
4b:c8:3a:9a:12:56:a0:0f:ac:e5:f8:51:bd:5d:72:
cc:20:48:d2:26:db:2a:71:81:8d:4c:de:70:12:eb:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:FE:D5:5E:D3:A5:2E:6A:A3:01:6C:7D:A3:A3:98:C4:89:E6:D6
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:a6:91:76:37:84:de:8e:aa:18:3c:1e:cd:9d:54:7e:94:
83:12:75:ca:c0:df:40:4f:78:a7:9e:87:04:ac:8b:6b:11:13:
96:37:66:bd:4e:80:81:6a:2e:b6:e6:69:10:16:26:c4:c9:22:
57:74:8f:51:c9:a7:2b:9e:a5:21:e5:ab:29:54:d4:e6:d4:62:
15:ab:cc:a7:ce:2a:05:a4:8e:0a:02:21:d7:73:bd:ac:e2:24:
0e:8b:8b:8c:6f:17:15:e1:ca:48:f5:51:f8:ca:5d:a7:5b:fd:
c2:dd:c2:9d:c6:e4:7f:82:bc:d5:08:99:32:1b:3c:2b:f2:56:
8a:ca:1d:25:21:ba:30:4b:ad:c4:93:69:49:ae:b7:d9:29:3e:
b5:06:f7:70:ab:ed:f3:56:62:3d:38:d8:f7:1b:02:7f:51:fe:
fd:00:55:87:30:92:e5:bb:dd:f0:76:b7:af:5d:f2:6a:cd:08:
8a:18:37:ae:aa:46:23:89:f4:77:76:09:99:26:8f:5e:3c:f2:
17:d3:b9:e3:1e:ff:55:14:ad:39:af:16:b6:36:b8:53:d9:73:
81:bf:20:cb:99:b5:86:03:aa:e2:6d:6a:7b:0f:2a:02:ea:74:
1e:ef:49:07:c2:d0:22:e1:29:76:ea:58:5d:ea:47:f9:8c:7c:
05:ff:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:36 2025 by rpki-client