Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: PbVs3Nnixgb96utBa/WTOliZUsQTgF57jy07A1I9EdE=
Subject key identifier: 32:BC:89:2A:36:D3:69:D0:B0:2C:8A:C6:BB:39:F7:3E:8F:2C:6F:B6
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 0199FBEA9F43BE2153A30AD002972FA6374A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0D8C
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: yaG6HFIBTbaEUr2h2Cjbmn0uM+SfdKY+IoZ2EVlocAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9f:43:be:21:53:a3:0a:d0:02:97:2f:a6:37:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=32bc892a36d369d0b02c8ac6bb39f73e8f2c6fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:12:5c:46:fa:82:1a:56:38:9c:24:47:72:
77:9a:d1:b7:e4:42:b2:1d:29:2c:f5:5e:1d:84:13:
98:5a:e6:7b:21:cd:15:c8:bf:25:ac:00:32:fb:e0:
e5:20:05:b5:64:06:ae:56:43:fe:2e:bb:54:a7:57:
2e:87:c7:9c:95:2f:cf:1d:ae:bb:39:5e:e8:88:cb:
be:8a:d5:be:0b:a0:10:52:62:94:46:92:2e:ff:de:
93:fc:3c:f4:02:f3:ae:ff:80:23:11:2c:54:19:5c:
44:de:c5:99:03:ae:dc:58:b8:51:06:27:48:0f:ee:
28:ed:84:69:77:68:93:91:ac:d6:42:7a:59:80:05:
06:c2:24:f0:d4:46:18:34:9e:d0:d2:4c:2f:dd:28:
53:d8:12:bf:90:db:b7:09:7e:4f:f7:e7:b3:62:76:
01:47:b7:1d:29:95:f8:a5:f7:ac:a2:95:cb:a0:73:
9b:b1:6b:51:75:76:db:98:53:ba:5a:10:ee:ad:70:
fe:09:b4:26:2b:6e:58:19:14:d3:93:ba:db:79:b1:
97:af:31:b4:6f:c9:d3:ca:20:a4:a8:89:98:fc:11:
b3:57:23:24:a0:25:70:97:ae:3b:f3:b7:43:e9:e8:
85:72:9a:c9:9d:67:fd:d2:d7:86:83:b0:6b:f5:82:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:89:2A:36:D3:69:D0:B0:2C:8A:C6:BB:39:F7:3E:8F:2C:6F:B6
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:f8:15:60:9a:3e:b0:f9:12:b4:ab:b4:bc:38:96:c9:02:
6d:98:d1:47:78:81:5c:80:4a:f3:16:d0:08:ad:a7:13:95:16:
b5:6d:4f:10:db:c2:f8:41:bc:17:16:56:c5:14:7f:c8:5b:84:
98:5d:45:83:7a:82:a2:7b:f3:33:1b:a9:b3:d5:df:cb:97:e3:
f1:33:15:ac:9a:b6:63:23:d6:2f:24:30:09:69:c4:9e:11:e5:
e0:dc:f9:11:c5:2c:1b:30:d9:f8:9e:33:26:1f:d8:43:13:74:
4d:fe:c4:79:48:20:5f:79:38:60:a7:4e:6d:7f:bb:00:11:eb:
e7:9f:c1:03:6a:43:15:bb:29:2a:79:01:a3:36:5a:aa:6c:03:
ef:ee:93:83:98:88:24:99:0f:4f:77:24:0b:af:fc:19:01:c2:
48:b2:e1:2c:19:bd:07:eb:83:cb:b1:39:d0:65:19:3e:e5:7e:
3d:f3:5e:f8:1a:16:cf:12:f7:58:30:c6:4e:78:40:05:d0:2b:
07:9e:a7:7b:2c:2d:8c:f9:8b:47:19:4a:0d:e2:01:25:a8:dc:
b3:f1:9c:8f:8d:8d:a2:60:4d:82:03:32:82:55:ee:0c:0d:6c:
88:fb:b4:26:42:0a:14:24:94:d6:bf:5a:d6:52:de:ac:9f:4a:
ee:e2:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:15 2025 by rpki-client