Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: ZZAPH4Of9skUdbLuuS7avxz3P80Imd8UZXrYmlgDyMI=
Subject key identifier: 78:9C:C6:A4:4C:24:FB:F8:03:16:18:90:5A:A5:FD:22:BE:E6:22:73
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 0198D4743BA4BB3A154B7D17748A98FC4639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0CF3
Signing time: Sat 23 Aug 2025 01:04:03 +0000
Manifest this update: Sat 23 Aug 2025 01:04:03 +0000
Manifest next update: Sun 24 Aug 2025 01:04:03 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: 0AyW+wAJavhpusOr8k3+Ovvpw9PzYkyDwtEuvoY+GkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:3b:a4:bb:3a:15:4b:7d:17:74:8a:98:fc:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: Aug 23 01:04:03 2025 GMT
Not After : Aug 24 01:04:03 2025 GMT
Subject: CN=789cc6a44c24fbf8031618905aa5fd22bee62273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:3f:0b:21:c6:e1:49:ad:bb:f1:34:e4:cd:
ba:55:da:8e:8c:c8:7f:73:d5:40:6c:41:80:fa:d7:
06:fd:00:62:5a:7a:10:f5:7e:5b:e4:b6:a4:4b:f2:
1d:10:90:55:14:ee:71:7d:17:94:7c:71:9a:a8:c9:
ad:7b:a5:0c:7e:53:cd:b0:c9:44:dc:d2:ee:7e:da:
fb:8e:ce:c7:45:39:e6:a6:71:6f:a0:87:30:7e:20:
3b:87:e8:56:ba:d4:e9:70:de:6c:b5:fe:9b:6f:bd:
97:bb:1b:8f:cf:5b:dc:33:58:26:4d:67:cb:d9:15:
6c:ea:1a:ab:5e:5f:67:80:7a:79:32:a0:09:9b:07:
61:ea:80:13:88:30:80:81:58:e3:50:d7:d9:ba:a7:
c6:ea:54:38:74:44:7b:d9:81:c9:53:b6:f0:dc:b3:
b4:42:c3:79:d2:ff:4f:65:c5:90:de:1c:3a:44:58:
b1:cc:6a:9b:42:fb:39:e7:ab:e6:e2:28:d8:31:62:
1c:9c:d4:c6:95:f1:0b:f8:57:ea:df:65:ec:fd:63:
45:46:49:8b:e5:d1:e9:e3:41:02:8e:00:58:ee:3c:
b8:d8:a6:6a:4c:11:0b:32:bd:1e:7b:b8:5e:e8:98:
e8:48:98:f1:64:33:5d:0b:6b:df:5b:6a:e8:ec:9e:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:C6:A4:4C:24:FB:F8:03:16:18:90:5A:A5:FD:22:BE:E6:22:73
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a1:96:3e:e2:26:21:58:69:66:b6:3f:bf:ec:23:61:77:08:
aa:d4:d0:d6:d6:82:79:d1:69:43:d9:9b:d5:21:3b:b7:d6:35:
58:a9:9e:21:d9:7b:2a:e9:2d:6c:df:7b:a9:25:43:8e:59:ab:
5b:59:25:67:77:7b:cf:8b:f0:fc:11:81:5e:4b:78:ee:0f:40:
fe:53:6a:6f:be:c4:57:20:82:7d:aa:f2:28:dc:82:df:25:12:
bf:5a:fa:19:6d:46:83:bf:c4:a5:64:a2:1f:d8:80:e9:19:78:
88:ae:fb:73:8b:21:de:c8:f1:05:54:99:ec:0b:37:64:0e:71:
00:63:1d:00:3d:ce:98:6d:3a:f8:ac:84:19:b5:d7:75:13:47:
10:ef:d9:c4:52:07:7e:c9:dc:ef:fe:1b:7d:5d:2d:29:e7:a6:
14:67:0e:e7:80:e5:ed:78:c8:63:13:1f:9e:c3:c1:70:85:89:
64:42:6f:61:41:ac:a5:9f:76:13:69:7f:35:df:9c:ae:a5:b8:
3d:a4:ee:b0:c9:5d:5f:6e:8e:a8:d8:6a:e2:44:a4:31:d4:f1:
01:06:be:14:0c:8f:c1:39:79:24:74:0e:9a:3e:46:c0:20:c2:
f3:30:fb:7a:0e:98:58:36:44:4a:5a:d9:13:c4:02:b6:2f:64:
ac:92:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:49 2025 by rpki-client