Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: Nwu8K9tLE8U9+VKonBiLJyOI5fMESKaalF1mKDXRq5o=
Subject key identifier: 74:0A:9B:AE:8D:9B:BE:8B:6E:B5:43:52:C2:A0:8E:6A:8C:2D:24:B0
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 0198D660554A34C4DFB55E082D035F7FAABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 1630
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: QJN/YCdZaOPxBKQ6VScuTONOcVLZuehwHp9CT16fW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:55:4a:34:c4:df:b5:5e:08:2d:03:5f:7f:aa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=740a9bae8d9bbe8b6eb54352c2a08e6a8c2d24b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:4a:1f:da:03:f2:81:6e:bc:b5:2e:bd:42:
0a:11:82:d1:55:10:dd:97:66:b2:65:82:f7:13:16:
97:44:8c:ec:a8:f0:73:0c:c5:fe:5e:9f:0e:21:b6:
e9:01:7e:22:25:53:92:52:b9:75:61:49:a5:2c:3d:
4c:e1:d2:e5:e9:c4:fd:59:66:ef:ac:7d:d6:10:09:
44:de:3d:5a:de:17:bb:95:7b:9f:51:89:31:34:20:
31:a5:f9:ba:82:9d:64:50:f6:e8:cd:eb:62:53:80:
f8:be:b0:68:53:e5:32:ba:7c:65:a0:24:13:2f:75:
42:75:a4:78:95:ec:a9:d0:ea:d8:90:16:f8:b3:6d:
4b:52:76:77:66:bf:1c:fb:6b:18:91:57:bc:42:af:
72:a4:93:00:62:0a:97:ec:9c:77:0c:d5:58:91:60:
7d:7b:8b:3d:57:87:3d:ab:7c:8f:59:81:b7:3b:08:
0f:7f:6c:94:12:9f:aa:f2:91:32:c2:bb:05:26:fa:
a8:1b:3d:7b:64:28:ec:ec:57:3d:15:81:fc:27:7f:
1b:c2:a6:7e:2e:d7:9e:97:28:8f:1e:b1:14:e9:a5:
fb:c3:5f:3e:a6:41:f0:f4:30:3b:3a:b0:c4:60:17:
6b:aa:06:71:c8:de:12:bc:54:11:4e:64:08:31:80:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:9B:AE:8D:9B:BE:8B:6E:B5:43:52:C2:A0:8E:6A:8C:2D:24:B0
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:c9:68:71:e2:6f:7f:c6:32:db:7d:76:45:7e:4e:51:cb:
c0:92:93:92:ef:c3:6a:2b:33:3c:09:8a:ad:bf:a3:c3:49:8b:
c9:f6:b5:c8:50:45:93:39:f8:23:ae:54:4c:37:b8:9f:f4:72:
64:36:0d:09:49:cd:61:73:43:fa:8c:f7:5b:f7:0c:fc:27:cd:
d3:b0:84:80:40:61:5c:5b:00:b5:31:25:45:fb:10:27:15:0d:
0b:59:88:48:54:40:84:d8:c5:08:b6:48:f4:e9:e1:64:f4:ce:
aa:a6:e1:45:22:80:02:ea:52:31:cd:9c:35:7f:64:08:04:2d:
a1:c9:44:5d:c9:0f:e2:70:5e:29:94:6f:1d:23:47:92:4e:7e:
ef:5b:66:b2:d0:93:22:dc:97:35:b7:90:e6:97:4f:d3:2a:e5:
31:e7:c9:14:a3:3f:1c:67:e6:35:1f:4a:42:44:13:ed:05:6b:
67:40:41:ab:41:10:56:37:80:6d:bc:c5:e8:33:b8:47:b8:df:
be:54:85:43:5c:fc:70:2c:6b:a9:ed:68:5a:50:68:c6:ad:33:
ab:c6:33:df:c6:07:d6:66:bc:60:4c:fe:5c:bc:69:27:31:c7:
86:fc:2b:29:9d:6a:8a:9d:00:9c:d8:55:ed:e6:2a:85:86:73:
96:98:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:42:38 2025 by rpki-client