Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier: 3l8lDe2iZWR6HFGZdAgyj9jkyS+4C6B5qgT8yCH/1Ko=
Subject key identifier: 90:BA:8E:D9:10:EF:FE:87:10:1F:AF:76:8C:66:EC:A7:FE:D9:42:01
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial: 0198D6CD50E4DB4D9B231F58A092078A3A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number: 0CDF
Signing time: Sat 23 Aug 2025 12:00:36 +0000
Manifest this update: Sat 23 Aug 2025 12:00:36 +0000
Manifest next update: Sun 24 Aug 2025 12:00:36 +0000
Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: iXQuOp5S9n0J8BflUerA9p+tGCeDJdgCMKKwjukNJRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:50:e4:db:4d:9b:23:1f:58:a0:92:07:8a:3a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Validity
Not Before: Aug 23 12:00:36 2025 GMT
Not After : Aug 24 12:00:36 2025 GMT
Subject: CN=90ba8ed910effe87101faf768c66eca7fed94201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:0e:73:e1:cb:53:e5:1b:06:e0:27:92:87:
1c:59:89:8f:95:8b:d7:58:39:0e:48:ba:3a:42:c3:
0f:0f:a1:35:c4:b5:48:19:be:b3:b5:d0:51:ce:55:
ac:b3:bd:02:a3:d1:75:3b:25:39:78:ef:79:ca:c0:
0e:3f:16:51:3f:cf:1d:18:62:65:c2:c6:bb:18:ea:
bf:80:49:e2:c4:27:e1:97:fe:f4:f6:9e:bc:fc:64:
ea:b2:4e:9d:8d:f5:6a:6b:86:4d:47:1e:d5:18:40:
de:0d:be:f4:99:7e:fb:4f:2e:78:ee:e8:c8:08:08:
6e:5c:dc:02:ee:63:74:15:78:aa:f0:9d:ec:f6:48:
75:d0:0c:4b:e6:2b:82:df:56:14:79:21:e9:e0:13:
4d:65:c7:31:5c:ff:84:a2:08:73:b2:88:99:4d:f1:
79:8a:dc:b8:78:c3:c2:31:2e:2f:84:ef:ae:ab:77:
1e:e6:b2:34:39:84:24:16:db:86:26:e7:91:5f:06:
cc:97:6b:44:33:be:19:df:72:16:06:17:41:7e:ef:
16:d6:6c:6d:d2:80:b6:25:77:e3:4e:60:c2:b0:aa:
d1:da:52:65:d8:ad:6d:42:a8:e5:81:dd:c6:50:0e:
40:42:5d:24:63:f1:c6:0f:37:38:aa:84:e4:d5:be:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:8E:D9:10:EF:FE:87:10:1F:AF:76:8C:66:EC:A7:FE:D9:42:01
X509v3 Authority Key Identifier:
keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:28:2e:26:2f:f0:b3:70:f1:5a:ac:72:78:ed:03:ef:48:f9:
e2:e9:24:2e:c0:e2:d0:64:69:38:12:f1:49:e6:98:f4:f3:0b:
a7:57:61:66:8c:54:a1:7f:10:81:a4:15:45:c3:8c:02:65:88:
4a:d7:ff:6c:2d:3a:18:1a:e9:e1:e0:c9:a9:d9:99:b6:43:c2:
67:5c:97:4a:db:dd:99:33:74:3c:b7:71:e5:57:60:45:be:47:
a1:fa:18:79:8b:49:07:90:dd:94:ce:43:bb:d2:85:d6:04:a6:
df:e3:1e:47:0e:c7:64:7a:43:6d:46:e2:f0:c1:ba:12:22:d4:
c0:74:45:6e:6b:cd:92:9b:d1:b9:c6:a2:14:ac:1c:77:b5:68:
54:9b:02:91:3c:5f:7c:96:97:7f:93:d4:48:ff:26:7b:84:fa:
19:05:f2:ca:27:02:ff:d8:1c:4f:c2:71:68:d8:2b:ae:11:d0:
d4:d6:6b:71:1d:f6:b8:91:a0:c3:fa:d1:47:ed:29:2e:3c:69:
7d:17:0b:7e:c6:5f:66:cc:2f:c6:f5:8b:5d:c0:a2:75:34:95:
c1:76:71:37:6f:0c:37:ea:39:23:2c:f1:99:1e:bc:61:b5:56:
e3:11:c7:8a:67:14:81:c0:fb:e4:6e:6e:a6:c2:4a:20:81:8e:
64:4e:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:18 2025 by rpki-client