Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: PMK0CL0sXpemrF+n83oChn1XtCmv0PSOw6OlpnWr3yY=
Subject key identifier: 71:51:8C:D2:2A:49:87:60:EE:D2:62:52:69:6D:BC:9C:F4:07:D5:EB
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 0198D6602F37A91B9793A2B106E804020107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:24 +0000
Manifest this update: Sat 23 Aug 2025 10:01:24 +0000
Manifest next update: Sun 24 Aug 2025 10:01:24 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: mbLkMhccHJbYUWA+JEAdbAQ+7Wo2tGDtNQ+ioZEcq1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2f:37:a9:1b:97:93:a2:b1:06:e8:04:02:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Aug 23 10:01:24 2025 GMT
Not After : Aug 24 10:01:24 2025 GMT
Subject: CN=71518cd22a498760eed26252696dbc9cf407d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:86:3e:03:92:3f:1b:30:7a:d6:5d:d1:fa:
b4:ce:bd:1d:13:81:b5:88:ea:fb:91:cc:42:c6:4f:
e2:83:6b:00:35:31:7a:97:de:2c:32:9e:23:a4:08:
36:de:35:b1:ce:d3:5e:ec:71:8c:0a:35:0b:ec:80:
34:9f:22:49:f8:96:15:47:d9:3b:6c:71:c4:c9:08:
7a:c4:42:0c:4a:2d:df:ad:ef:b9:fc:07:bc:52:54:
6a:67:08:e2:de:91:a6:4d:2f:3d:e3:14:e5:f0:7a:
14:87:9d:ef:cd:75:e6:7a:29:83:90:52:5b:da:35:
5b:1e:92:ce:70:5e:20:2a:89:0b:9f:24:0f:cf:58:
27:c2:38:b1:89:2a:d0:f1:5e:5e:d5:6d:3f:fe:3a:
9f:8c:90:1e:4c:5f:61:4e:22:be:ce:be:b2:ca:b1:
a3:88:eb:cd:25:45:6e:1f:6b:b3:d4:4d:52:54:0d:
0b:03:ba:94:4e:cb:b1:eb:88:17:09:ec:46:f7:87:
77:06:61:98:e5:7a:9a:22:07:e6:4d:43:05:cd:05:
0e:89:8b:5c:5c:03:90:cf:f0:36:06:75:d2:bb:9f:
80:61:96:94:4a:6f:10:09:9a:96:a8:37:71:63:01:
72:9f:44:64:63:4a:6a:6a:9a:17:d0:0b:8c:55:8b:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:8C:D2:2A:49:87:60:EE:D2:62:52:69:6D:BC:9C:F4:07:D5:EB
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8c:14:e2:3c:0b:fb:d8:db:0a:53:f0:3d:8d:d8:5e:1d:91:
5f:74:76:13:b0:69:00:da:22:1e:c3:71:bd:5f:59:65:00:e9:
e1:7f:e4:96:d8:a3:42:1c:63:15:03:76:95:c2:dc:40:30:e1:
15:b5:36:6f:2e:da:a5:bc:46:09:53:be:66:15:0a:95:8c:cc:
15:f3:fa:84:f2:df:02:15:94:93:43:d0:03:85:a9:6c:2e:8d:
af:2b:71:e6:12:8f:cf:41:b5:62:4e:97:9e:06:23:65:f6:1c:
f9:9e:25:65:b8:af:0d:f1:d6:c6:bb:b7:4e:d6:3d:bb:91:32:
4a:c7:5f:5e:67:a4:7a:1e:86:b5:72:e6:8c:8e:d2:5c:37:e6:
5a:ac:6d:24:75:70:55:e3:44:79:4f:e3:0a:f0:4f:53:ec:12:
c6:06:46:53:8d:c5:8b:1c:d9:ad:93:e8:4f:ea:b8:52:83:90:
26:a3:77:d2:c2:08:68:93:a9:b8:be:2c:9f:3a:56:5c:25:7f:
0b:92:5b:b0:00:e7:96:d2:7f:a2:6a:b9:ce:71:85:f5:b2:ed:
28:69:e9:c4:a4:d0:43:d8:03:44:a7:20:30:f2:19:da:48:ad:
1f:5a:8a:29:ee:14:46:5c:73:9c:40:e3:5c:70:6d:e1:e3:b8:
10:c4:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:36 2025 by rpki-client