Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: bQuSFiNCfTKIHXKdSMbFwG5vCRhztHjs1DkDo8GB1Is=
Subject key identifier: 0B:46:06:1E:01:7A:35:D1:89:68:D3:7B:6B:79:5B:BE:FC:4E:09:39
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 0198D54E45BED19F97E4C22104D33526DD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 0166
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: hbW+3ckeoAfZJREsWYYr5vrJbs/Q6zdhnGEOgoKo3GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:45:be:d1:9f:97:e4:c2:21:04:d3:35:26:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=0b46061e017a35d18968d37b6b795bbefc4e0939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:f6:52:8a:22:dc:5e:1b:9a:3e:8b:8d:7a:
83:00:60:85:07:fc:03:b9:f2:cb:5f:b8:b1:e4:ab:
85:cc:97:b7:47:69:44:8b:f8:45:91:f4:56:b7:a9:
66:45:1e:36:75:94:1e:41:62:8b:7e:09:24:c3:16:
4b:a2:93:58:2e:9f:db:58:3e:b3:ba:83:65:93:be:
86:b9:2a:8d:e6:55:be:a7:1a:5f:5c:f6:42:88:f9:
1b:36:0f:09:09:e7:8d:dd:96:26:60:cf:12:56:e3:
a2:79:6d:a9:7d:b0:bb:57:24:e0:06:3f:9e:49:5c:
67:80:c9:54:74:96:f6:f7:8e:21:5b:5c:32:cb:d6:
77:1f:94:3f:69:2e:5f:a4:34:67:c1:5c:5b:54:7b:
ce:55:33:50:65:1f:49:af:68:36:6f:06:62:39:87:
c3:9b:dd:6c:71:1a:c0:39:97:a1:f6:51:3b:4f:77:
06:a6:44:e3:fd:58:9e:c9:5e:d7:53:cf:ad:55:ef:
d4:f1:8c:09:65:8d:f7:27:42:75:e5:75:fa:7f:50:
ab:1f:6c:bd:af:59:06:88:7c:ca:4c:77:c7:eb:0a:
d4:f1:b2:59:62:eb:14:b5:70:62:2c:10:0a:13:54:
b3:8d:ed:7b:aa:6d:2b:10:3e:c0:b8:c3:44:68:b5:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:06:1E:01:7A:35:D1:89:68:D3:7B:6B:79:5B:BE:FC:4E:09:39
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:87:8f:76:8a:7d:25:9a:94:0e:ad:da:1b:41:14:21:12:38:
9e:82:2b:0d:fd:3d:9d:82:bc:69:a4:86:cc:c2:5a:64:a4:42:
2f:c7:73:0e:2e:21:0a:06:cd:c4:bd:55:86:d8:42:c0:75:2c:
3b:71:8a:d7:b6:0d:c4:22:da:05:eb:50:1b:3a:dc:b3:e9:28:
49:5e:1f:6d:84:46:0a:b2:ba:a5:cd:94:cd:bb:9e:a3:4f:63:
53:ba:f8:d3:e0:06:51:db:77:2a:d7:69:1b:7b:2c:17:bf:d9:
fa:f1:8d:57:8c:24:f3:7e:f6:1d:a2:6f:77:44:82:cc:e9:86:
98:61:4d:f4:a2:16:ec:1a:1f:5a:e6:ed:dd:24:8d:45:36:4f:
0c:d8:c2:bb:e4:42:87:96:cf:5c:eb:22:27:ed:de:15:1a:aa:
a5:df:94:0f:34:87:35:d3:89:29:2a:58:17:79:a8:ca:b9:cd:
2e:74:f3:e9:fe:92:4d:99:06:f5:08:fb:ae:9d:af:96:39:4d:
8e:e8:5e:53:e1:d1:fd:83:24:e9:7a:92:c9:de:b8:b5:76:6e:
75:71:3c:3b:cd:57:fe:23:7d:e7:89:41:6e:37:40:c5:d4:b2:
b1:7f:da:a4:36:18:6e:8e:1a:05:7d:46:17:89:f1:f7:bb:b3:
08:11:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:28 2025 by rpki-client