Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: rZV2GEeZXc3tMXfHq8MWfoptmet2vf2UHATlgfkdMD0=
Subject key identifier: F2:34:10:66:04:21:C3:DE:57:DC:A2:81:83:92:E6:CC:DC:FD:11:E5
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 0198D51578991C6F8B86CBA474816FAA1D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: LZGE0MDE7DbUuEfR4694jxEioGSoeDY/635bQqp8Oq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:99:1c:6f:8b:86:cb:a4:74:81:6f:aa:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=f23410660421c3de57dca2818392e6ccdcfd11e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:50:51:64:33:45:6b:d9:45:fd:b4:90:ef:
f1:15:6a:dc:f6:c1:5c:46:83:5b:a8:6b:85:79:22:
b4:6d:0d:88:9e:84:74:1d:2e:02:14:12:25:33:ba:
4a:e0:09:9e:d0:96:63:8b:5b:02:09:89:be:0c:a0:
0e:fe:7a:41:bd:4f:86:4d:8a:3e:f3:ef:79:b6:b7:
24:44:54:2a:d0:11:90:44:6f:66:7e:b5:72:57:11:
0f:02:04:bc:62:4d:ed:3a:db:95:f8:e3:e7:65:b4:
80:a2:2c:6a:ed:c2:dc:2c:76:4e:89:5e:63:de:74:
9e:71:5e:49:18:91:0d:e8:f0:60:be:8d:8c:64:d0:
5b:96:65:08:47:c8:4d:b8:40:18:2b:a6:fe:ca:93:
a5:bc:34:ac:d4:01:98:1b:fc:f3:21:51:93:e3:f7:
4a:96:84:d7:53:90:8b:26:7f:30:f0:47:4b:61:74:
d6:56:79:6e:a9:25:01:ad:83:29:19:f2:a7:a6:69:
3c:59:08:6d:86:0b:00:a4:c4:a1:43:87:3a:f8:2f:
2a:45:23:0b:ee:09:79:c5:1c:21:94:65:95:88:8c:
6c:08:8b:89:6a:fb:8f:f0:bc:99:12:73:d3:db:42:
13:23:86:c0:c8:37:70:08:e3:10:f2:5e:91:e0:33:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:10:66:04:21:C3:DE:57:DC:A2:81:83:92:E6:CC:DC:FD:11:E5
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:78:5f:28:53:df:25:77:6d:e1:a3:05:32:4e:4b:45:d0:
d0:4c:bf:15:08:fc:d9:74:04:15:15:ba:c5:9d:32:98:d0:fb:
9b:c2:ce:18:82:56:26:b6:d6:21:45:ab:f4:82:fc:b6:f9:50:
10:21:8b:ea:91:fc:f2:da:6a:db:9d:2e:a4:09:b7:69:f0:af:
aa:2a:c2:66:47:a2:5a:37:8f:e6:38:bb:58:48:6b:79:be:31:
be:18:09:36:5a:83:b0:78:cc:cc:9f:b4:c7:8a:74:6c:a1:be:
22:91:7b:cd:28:c2:7d:37:9d:69:b8:18:68:68:b2:91:21:cf:
eb:c2:ef:0f:ca:96:37:88:50:da:d9:b9:80:0a:05:8b:1d:a5:
fe:d5:31:33:77:20:36:8b:10:57:50:d9:8a:95:88:75:e5:cd:
1b:e0:84:40:08:98:fb:ae:a3:0b:f9:f2:14:43:27:b8:64:77:
70:41:4d:cb:ff:38:84:66:e9:84:3f:4c:15:32:f9:42:55:7a:
64:8e:b7:ca:39:43:f3:bc:b3:68:c4:98:53:de:61:4a:c0:31:
fa:f3:2e:cb:ce:d0:27:bc:f6:37:ae:30:b8:44:62:06:be:f1:
df:59:ce:e6:1e:c0:b9:5b:06:77:2d:c8:43:be:bf:e8:42:ab:
26:8e:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:28 2025 by rpki-client