Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: 507IaD0L98KKT3ceR8/oNIbBuuCuzLhIpew6LjasgsQ=
Subject key identifier: F9:5B:25:1F:35:DC:9E:20:07:71:0A:CD:D4:2E:4E:B1:89:7F:D1:BF
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0198D92B4B08D9A9612DE92BFE1FCC5633D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 134B
Signing time: Sat 23 Aug 2025 23:02:29 +0000
Manifest this update: Sat 23 Aug 2025 23:02:29 +0000
Manifest next update: Sun 24 Aug 2025 23:02:29 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: A6sSktpkocN/Qw5JQge9yh1cRaFfPHId1T5viWqEhe0=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:4b:08:d9:a9:61:2d:e9:2b:fe:1f:cc:56:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Aug 23 23:02:29 2025 GMT
Not After : Aug 24 23:02:29 2025 GMT
Subject: CN=f95b251f35dc9e2007710acdd42e4eb1897fd1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:a9:81:bf:d8:58:f1:74:44:16:7d:34:07:
d9:73:76:62:bf:91:f5:2f:be:b1:26:2e:2c:f8:35:
ed:d1:26:c7:a3:87:33:f2:4e:ae:7b:28:53:37:9d:
5b:bf:fa:3a:28:c9:3b:74:a0:14:09:55:7a:3d:27:
6f:1e:a8:ee:74:81:80:03:3f:c3:9e:b5:07:70:51:
80:e5:f7:77:52:43:72:34:93:bd:fd:4c:f1:32:ac:
a3:e8:3e:32:70:a1:4e:6d:79:bc:e0:90:82:fd:f8:
e8:04:40:75:64:1b:79:b9:bd:a6:9a:4c:89:04:38:
ae:11:f5:53:f1:38:48:f9:73:0c:43:de:0c:85:79:
f3:52:0a:66:9c:2a:99:0d:94:30:64:a7:94:2f:a8:
ea:ea:9c:a9:8d:8f:12:c2:8c:0a:de:09:4a:cb:dd:
9a:16:c4:2a:8b:53:44:7e:fa:fa:cb:ec:f6:1c:69:
a9:b6:5b:6e:e3:9e:f9:58:f0:1e:cd:13:c7:e3:13:
6d:73:04:c1:bf:f4:f9:c8:55:ab:f0:ca:3e:a5:d1:
9c:67:46:d1:1f:da:a1:b4:54:8c:dc:25:76:9a:3d:
ac:fb:07:52:54:dc:16:99:be:f7:a4:16:39:de:63:
17:87:dd:12:03:38:d4:51:dd:b7:d2:c2:c5:de:7b:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:25:1F:35:DC:9E:20:07:71:0A:CD:D4:2E:4E:B1:89:7F:D1:BF
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8e:e4:05:ed:57:3d:e3:ba:ad:6e:2d:9e:db:88:56:eb:28:
c1:3d:6d:6b:bd:27:09:32:a0:df:22:6d:68:56:00:fe:fb:34:
5e:c3:63:0b:93:96:55:08:2a:d0:1d:80:7e:d2:66:2f:59:ae:
d1:28:5b:4c:6d:4e:aa:b3:2d:cc:ff:18:29:a2:91:1f:b1:05:
44:b5:58:b0:63:be:6a:c5:98:c6:85:b2:22:a9:7d:a8:a4:01:
56:59:32:29:1a:ef:a3:f0:31:72:50:3d:de:72:ac:28:6a:17:
a9:4e:2a:18:e1:77:7a:69:d4:48:ea:b1:ef:92:40:ff:d3:d6:
f7:19:d3:f1:5d:c3:cc:bf:95:a5:dc:30:e0:fd:d6:b7:ba:18:
99:75:f0:5e:52:3f:ba:4a:6f:ef:c1:90:04:e6:6f:e4:7d:98:
7c:b3:b6:35:2b:16:ae:b3:a1:df:bd:37:f2:4a:48:6a:0d:fc:
a6:1c:65:a7:e4:3a:4c:26:24:1f:55:eb:1b:c1:ac:67:ab:db:
4c:fa:13:74:ef:cd:02:82:5e:6c:df:a2:ea:26:a5:b9:8a:70:
84:d1:fc:04:51:de:6e:99:09:6c:ac:7f:61:0f:03:62:1f:ef:
09:ee:a4:04:9b:da:40:8f:70:4f:99:06:5c:2d:09:f9:56:1e:
89:cd:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:27:44 2025 by rpki-client