Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: A4ozKZbRo7OQVr/91EajEj+qIAQnuD1F3VQ9VWBLWsY=
Subject key identifier: C9:09:FA:89:16:89:B4:94:70:65:12:4D:E6:6A:DC:7F:20:31:55:E0
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0198D5157D7F837243595FCCDD38C921AF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 0541
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: clT3fHpPlxyWkXwKL7ReFcW22hkdwYlCvAZ4JRvR6jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7d:7f:83:72:43:59:5f:cc:dd:38:c9:21:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=c909fa891689b4947065124de66adc7f203155e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:8e:de:c5:6b:d6:0c:92:57:03:7e:82:e5:
15:97:54:6a:f3:c5:31:88:c9:f0:e5:24:ee:ba:2b:
5a:59:9e:50:6d:9e:af:92:05:ab:40:7a:10:5e:10:
23:3f:de:bf:1f:4b:88:75:2d:2f:d2:f3:8b:4d:c5:
14:af:1c:85:75:66:38:33:20:ef:85:15:b7:15:83:
88:92:e9:ed:b5:60:9f:52:b1:1b:ea:12:57:cc:36:
6f:3b:a9:bc:f4:83:bc:68:04:f9:22:ff:d4:6b:76:
86:9b:ae:e0:6c:e2:88:95:da:9f:54:2a:91:ca:e4:
77:96:77:52:42:b7:fc:27:33:95:14:ed:5d:69:e0:
98:71:31:8c:98:68:85:79:d8:ff:89:be:81:ef:76:
70:6d:02:12:0a:f6:07:90:99:a3:fc:9b:86:0b:10:
b1:3e:06:a7:2b:08:e1:0b:25:eb:15:72:d1:47:bd:
b3:c0:6d:1e:5e:4a:3d:c2:5e:90:a3:3c:f2:7f:eb:
44:9b:2a:02:e6:55:a5:d4:a7:4a:c9:c9:7a:45:97:
51:cf:67:81:62:d8:17:4b:a8:b5:2d:82:35:e4:72:
8e:3a:eb:ed:4a:0b:2b:e3:a8:8f:ec:d5:b4:ed:8c:
2f:f1:fb:d5:85:e8:76:0c:ef:85:76:14:8d:04:96:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:FA:89:16:89:B4:94:70:65:12:4D:E6:6A:DC:7F:20:31:55:E0
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cf:0a:ed:c3:84:c9:59:91:9e:24:74:30:6b:6c:f9:0b:a0:
ce:93:6f:fc:74:7d:d0:b1:db:91:88:07:00:bf:87:93:06:50:
72:f3:2e:fe:57:6d:e0:cd:fb:33:85:23:69:44:80:0d:6e:37:
35:29:2a:14:5c:69:94:ca:79:2f:c2:11:57:8f:65:b5:23:b8:
ca:7b:b8:65:f5:72:d8:c1:8f:22:c6:8c:1e:13:71:65:52:fa:
ed:78:73:b7:98:55:b3:6b:c5:9e:6e:84:d7:af:e0:c1:ab:0e:
e3:6f:22:99:b2:8b:43:6c:c0:11:9f:7c:aa:63:b5:7d:40:63:
a7:7e:3c:54:7a:39:99:6a:3a:0a:d3:27:2f:4c:37:f4:05:da:
27:7e:c2:ce:09:88:b5:ba:da:11:e7:55:cf:b6:1f:1d:97:5a:
de:d9:9b:7d:b6:fd:80:2e:ed:22:9b:5b:36:b3:5c:3f:be:85:
73:4e:c1:20:03:09:01:34:d2:2a:e6:b5:db:22:33:53:46:5a:
55:f8:e2:56:2a:79:5a:b2:3d:ba:e4:ac:6c:14:81:ed:37:0e:
f8:3f:60:96:54:94:2c:56:85:0d:1f:7c:a4:d4:db:bf:4a:06:
4a:53:e4:9a:76:ae:65:bb:ce:24:36:77:f0:06:a6:ba:c4:38:
8f:42:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:43 2025 by rpki-client