Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: LXLoSYB1B0+cPVf1pN5+K7CQ2WSDe1tEcWD2mtdkoYY=
Subject key identifier: 9C:32:54:A1:7F:F8:65:0B:8C:C0:EB:98:95:57:91:4B:68:2A:1F:74
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 0199FEB49A7E5E20A345AD281977B13FA1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 1530
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: ROp+J9Ua4NLFh/pBWWcRDSmQ0ii8fnhm+25kBSBV/Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9a:7e:5e:20:a3:45:ad:28:19:77:b1:3f:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=9c3254a17ff8650b8cc0eb989557914b682a1f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:8c:6a:10:82:57:fc:6d:fe:8f:56:e3:fc:
a4:81:22:9f:c0:63:ff:56:b4:f1:cf:97:9e:67:eb:
b2:cf:58:dd:43:22:6a:12:5a:7e:3a:9d:0b:a1:c0:
89:df:fc:ed:40:3f:af:a1:e3:10:1a:18:5e:54:07:
02:b0:44:76:47:1f:99:02:32:dc:11:01:7b:78:c1:
0c:6b:1d:74:ad:b7:41:91:d4:30:fc:a2:6b:4e:37:
d0:a4:12:db:7b:bd:e1:78:98:e2:14:0e:0f:20:51:
94:39:a4:73:f6:55:3c:51:df:46:d7:03:c4:ec:ca:
e9:95:45:37:52:83:38:e6:5f:22:c4:0c:b5:56:aa:
f3:3f:32:f1:bd:48:94:38:4a:c8:7e:8c:00:09:b2:
ad:95:92:6a:2f:8f:bc:b0:f4:d7:83:e0:4b:3c:a0:
12:28:b9:9f:89:a4:a8:4e:1c:4f:20:32:ca:82:b0:
c6:93:14:e2:5f:62:00:fb:b4:ac:96:ef:a5:33:ef:
3d:21:50:44:d3:1e:c6:e9:9a:91:1f:b7:2c:9a:e5:
2e:03:1f:d3:5e:0e:55:96:3a:33:ff:b3:eb:8a:94:
da:9f:0b:2a:15:70:e0:5b:88:06:39:fa:b4:43:44:
3d:de:93:1a:d0:d0:1d:db:0b:9d:21:f7:dc:71:4e:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:32:54:A1:7F:F8:65:0B:8C:C0:EB:98:95:57:91:4B:68:2A:1F:74
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:65:89:e0:da:65:13:6c:3c:47:6f:78:8f:16:f7:76:e0:0c:
7f:39:3d:3e:1d:33:96:8f:02:45:f3:48:1c:bd:82:7e:51:4c:
b5:9b:78:b3:b0:3b:dd:e4:a0:43:18:fd:fa:58:6d:dc:5d:e8:
64:f2:77:20:b7:a8:10:ad:8e:22:ec:9a:4f:60:a0:5a:06:fb:
14:ae:b7:19:28:9e:64:4c:9f:80:d4:c5:35:c1:55:91:d5:f3:
9a:c4:c6:b5:5a:dd:71:c0:b4:9f:08:95:d3:ac:c3:5e:27:fe:
b9:82:a6:dd:d9:ae:e5:7b:07:0a:c9:77:9e:c1:66:af:8f:b5:
60:e5:57:d6:45:ab:af:75:f0:d5:59:9f:58:d6:62:f7:37:63:
8a:9a:de:f0:e3:5e:d7:d6:0f:73:a3:81:55:f4:3e:d2:92:1b:
49:33:16:10:4a:8a:3b:92:69:5d:3d:27:f1:f1:66:9a:40:1b:
48:20:e8:74:74:51:ed:58:95:6b:47:8f:09:60:d6:0c:23:71:
5e:20:2d:dd:1c:4b:b4:c0:8c:e9:e8:a4:2a:24:47:54:38:f1:
57:22:7e:e1:ec:40:a9:15:71:f2:0c:45:cc:c2:e3:9f:20:fd:
3e:48:9a:04:fa:88:6b:36:46:7f:0b:02:33:2e:ce:0e:2e:33:
05:77:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:36 2025 by rpki-client