Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File: mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier: fAuhDHifeCOVIi285lqHUn2fyfwsdN43X2dj1XaMy2g=
Subject key identifier: 99:A9:06:5B:1B:94:21:75:E6:B0:C5:8B:83:2E:EB:6D:50:DD:D2:4B
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer: /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial: 0198D66137B7AC81CADF2C043397BFFE9FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number: 12DF
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: kvfadkwKqBCy9suLZRXafOzlgiYiSMM2a+HX9iisf64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:37:b7:ac:81:ca:df:2c:04:33:97:bf:fe:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=99a9065b1b942175e6b0c58b832eeb6d50ddd24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:1f:54:3b:53:fb:eb:5c:f2:19:cb:a3:67:
ea:72:0e:da:a5:d0:31:8a:a6:49:bf:16:87:02:83:
41:10:6c:72:42:9d:8d:7f:60:0a:eb:cf:52:15:99:
63:17:aa:aa:b5:f1:5d:ba:09:10:6a:e5:4a:f9:c8:
8e:c6:5a:9e:a6:d3:49:75:9e:e4:fc:26:09:fb:d1:
70:ae:ae:6e:cb:13:d1:7f:14:9c:c5:21:96:ce:c3:
8b:8d:fa:35:79:0c:31:39:99:8b:e0:29:34:1d:e4:
b7:3a:f3:ba:94:fe:a8:a3:71:8d:98:23:07:b9:b4:
eb:c0:9a:52:d6:4b:bc:e3:c4:86:ac:84:b2:a3:8a:
e7:d5:88:39:29:91:69:75:21:0d:9c:79:0d:e7:6b:
a9:db:8b:3b:e6:9c:ec:f1:19:22:35:90:41:f1:64:
32:82:0d:3c:e7:ec:1b:a7:04:e2:ae:b2:9f:b5:7e:
17:eb:f1:33:ca:f8:ff:4e:b7:63:b7:f4:96:28:10:
67:47:40:26:0b:32:05:1b:eb:08:a8:0a:7e:4f:61:
3d:f4:67:98:a7:b8:75:09:84:a6:a6:3a:d3:80:d2:
c0:35:ac:fe:72:98:81:40:71:41:0d:b9:d7:46:0e:
db:65:51:ed:1d:4b:e6:e0:07:3b:1f:a8:4e:c9:fe:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:06:5B:1B:94:21:75:E6:B0:C5:8B:83:2E:EB:6D:50:DD:D2:4B
X509v3 Authority Key Identifier:
keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:b2:88:f0:4a:eb:6f:45:22:47:45:c4:88:11:f8:38:48:
75:cd:8c:29:b1:43:ee:08:14:d4:39:2c:6a:39:e2:3f:4d:a0:
62:d9:6e:c9:a8:e2:35:38:39:44:a7:e6:db:a9:9f:f8:97:53:
3c:41:7c:42:dc:19:6f:e5:16:0a:b7:43:77:d4:d9:1f:fc:5f:
58:1d:55:ff:3a:30:36:ee:14:91:1c:ce:72:97:98:a3:76:5e:
65:be:c4:c3:6c:6f:9b:d3:88:0b:b2:8d:f1:18:81:7b:9b:71:
a6:ff:25:66:09:e6:9e:58:0d:29:2e:c9:89:43:51:cf:c1:2c:
ec:97:85:df:d5:ff:1e:86:91:f8:a8:68:b8:bf:34:55:a8:70:
e3:5f:2d:db:91:33:84:ca:8e:e3:61:a5:f0:37:f9:40:f7:e0:
32:71:b8:01:d0:85:69:3f:75:00:cf:65:33:df:cf:ac:8c:61:
b3:4d:00:6c:f1:06:d8:67:cf:5a:9d:1d:92:8e:7a:01:00:e7:
c4:a6:6f:e7:d3:a5:6e:f8:99:16:46:1a:95:3a:ef:84:48:73:
9c:5c:2e:a7:5e:e0:bd:8c:41:5e:52:9a:de:94:d6:7f:5b:f8:
78:4d:d8:83:94:c0:24:3f:d0:e9:62:db:9a:c5:24:39:b2:15:
43:03:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:33 2025 by rpki-client