Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier: IjKdwP/Ae35J23NzVNTxnd2hBfK4tS41GS3o6RhcL+8=
Subject key identifier: 99:08:8D:1B:40:6A:99:54:0A:6D:1A:A8:67:B2:8E:63:16:D6:6A:8B
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial: 0198D65F93A8901015DE67F4CFC18E9F6B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: bktZhbhmy5KhtyVHux4NpVgFpUoOWOEYlHaVZ9Wqe5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:93:a8:90:10:15:de:67:f4:cf:c1:8e:9f:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=99088d1b406a99540a6d1aa867b28e6316d66a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:e2:fa:f9:68:a8:b4:be:ce:7c:f3:19:7e:
5c:31:94:60:b3:d5:fc:af:6c:e7:17:b7:62:f4:e5:
43:1a:b9:a5:1d:38:54:d0:49:a8:fc:c3:1b:23:23:
35:62:0d:55:86:67:33:11:c0:32:60:30:25:17:00:
14:fd:e6:07:0f:e8:74:a5:d9:2c:6d:ac:36:53:ed:
75:65:53:c3:b9:6f:59:44:f5:b9:ba:92:b9:bf:5f:
5e:9e:49:f3:5a:65:64:7d:4d:e1:de:b4:a9:74:83:
48:3b:ee:ca:30:04:83:0d:a5:36:f7:92:70:83:2f:
2a:fe:b5:80:43:c6:10:79:7d:e2:9b:90:ff:5c:c1:
59:14:9b:8d:2a:af:85:41:16:8f:35:9b:4b:b2:f6:
fb:22:45:7b:e6:d4:57:5b:e9:1b:4d:dd:a2:5d:74:
bb:5c:a9:87:45:64:a3:b1:12:d1:50:8f:2a:eb:55:
10:30:43:23:01:b7:3b:ea:8c:6a:ca:4f:ba:15:06:
fe:cd:0c:db:b6:62:ec:83:84:c5:40:05:01:67:19:
a7:68:cc:91:87:14:e6:76:ed:ef:26:36:e1:f5:c4:
cf:3b:af:43:24:13:c8:6a:a0:84:3c:a0:a8:7e:98:
8b:7f:23:98:04:af:8f:2f:43:92:52:9b:58:48:81:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:8D:1B:40:6A:99:54:0A:6D:1A:A8:67:B2:8E:63:16:D6:6A:8B
X509v3 Authority Key Identifier:
keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cc:f4:4a:e9:ca:aa:59:16:53:b5:65:69:a4:81:dc:5b:5c:
f9:0e:ab:5d:d4:24:74:20:d1:93:16:61:f8:d4:19:3a:75:41:
f5:e8:e6:70:c7:6d:7c:54:ad:ad:86:d2:a2:a5:98:be:8d:4f:
14:20:f7:6a:fd:1b:46:12:aa:ed:15:f4:07:a3:df:30:13:55:
90:6f:d2:76:d6:60:3b:bc:17:6c:ec:05:83:93:ab:09:f2:6c:
55:91:c9:31:f7:b5:44:aa:9a:f2:84:d1:f0:0d:4f:c0:52:8d:
fc:af:e0:78:a6:43:b1:37:d8:63:11:29:8d:cc:60:34:ae:84:
56:0a:92:b6:64:8e:e9:47:0a:6c:8b:a1:14:68:94:fa:9a:bd:
7e:31:10:67:81:42:e9:8c:87:89:83:ec:47:93:b4:55:d2:b7:
26:a4:1e:1a:62:14:a6:c8:4d:ed:c6:d3:8b:1e:69:97:bb:48:
4f:d1:0d:54:32:f7:83:e3:70:29:dc:30:b3:c6:76:45:b7:d9:
93:a5:ea:ce:fc:94:dd:fa:6c:4d:7f:a0:80:90:d0:63:c7:44:
51:cc:62:59:85:30:d5:90:8d:be:ae:63:4a:8b:9f:4c:33:25:
05:48:f5:73:10:33:32:df:b3:f5:a8:5d:19:c4:47:51:7c:44:
97:56:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:01 2025 by rpki-client