Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: IJY+uzZYUXJqL2NR+Q+a0Oz2WSFrJmJHISAkyRF0QEA=
Subject key identifier: C8:B9:F9:01:7C:29:45:6F:1D:AC:EB:A6:F4:9A:D7:C8:B2:94:21:52
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 0198D4DFDA4A3AAB1E1FB41951FDD0D7A0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: +Ur9kjFL7j4XlZgG98+ADsM5xYnlEdvS19mSSfBQX5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:da:4a:3a:ab:1e:1f:b4:19:51:fd:d0:d7:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=c8b9f9017c29456f1daceba6f49ad7c8b2942152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:4c:7f:55:26:41:a6:f5:b4:a2:58:e7:19:
cd:32:9d:80:74:1c:6c:7e:f5:86:e9:7f:c4:6f:ce:
9a:b1:28:02:6d:ac:c2:26:83:71:30:fc:d4:54:12:
13:5a:a1:98:0c:3e:4a:0c:13:c0:05:59:0a:d2:82:
b2:9a:af:07:26:e9:48:48:c8:3c:7e:95:21:71:d7:
4f:23:9e:95:9e:53:6e:33:5b:02:49:ca:91:d0:6f:
f1:f3:a8:40:db:bd:14:12:3b:e8:80:1d:f1:8a:fb:
68:db:8b:14:a1:67:b6:b7:3c:81:82:79:7e:e2:46:
fd:77:43:e1:f2:33:b2:98:d3:a1:38:31:28:c3:07:
9d:ec:e8:0a:0f:e8:2c:fe:41:57:0a:de:6f:f1:03:
17:40:7c:fc:01:55:a5:82:6c:f8:05:fa:2c:c9:dd:
b9:16:7c:11:5b:49:5c:7d:55:a7:50:9f:79:b2:55:
af:ed:94:b3:36:91:96:d1:0b:41:f2:ff:c4:83:3b:
b1:c3:4f:71:a6:38:e7:6a:87:e2:6e:35:f9:c2:de:
76:5a:74:8c:e2:1f:75:db:2c:75:dc:b0:41:49:c3:
3b:8c:66:26:4b:72:c3:af:82:57:35:55:cd:7b:23:
c9:ef:b5:90:a9:5a:7c:70:bd:e0:52:b2:b1:cf:1c:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:F9:01:7C:29:45:6F:1D:AC:EB:A6:F4:9A:D7:C8:B2:94:21:52
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2f:da:b6:47:fa:a9:4b:76:d8:83:40:a9:11:46:56:e2:f4:
37:33:be:9b:ad:e2:f3:12:2e:91:38:5f:00:1a:c6:94:c1:3e:
34:90:8d:29:42:41:da:55:62:95:b7:f0:b2:e6:dc:9e:3d:1e:
c1:05:3e:80:f1:5e:f4:56:15:3d:e7:ec:ad:ba:c3:2c:73:b7:
b0:98:5a:54:dc:7a:72:4f:4c:b2:00:9f:5c:53:93:35:eb:bb:
ea:93:30:8c:9e:71:82:24:38:ec:08:bb:bb:c8:6c:43:25:0f:
b5:b4:74:80:a6:82:2a:94:d2:76:66:47:27:b2:43:d3:18:47:
6d:37:ec:df:00:7b:38:97:a0:6d:ba:58:54:0c:59:41:bd:1a:
07:26:76:19:31:f2:11:68:49:cc:9d:ce:82:df:fa:8a:ec:4c:
2a:6f:4f:1f:48:52:fe:ef:d8:8c:99:5e:e5:0a:bb:03:4a:c0:
ea:27:13:c5:74:61:c9:a3:83:68:7d:92:6f:34:aa:ea:b7:cd:
06:39:15:58:68:57:c6:03:ff:b3:be:34:bc:9b:0d:cd:77:bc:
8b:ee:8d:2d:1b:22:96:b1:66:6e:5b:43:ff:f8:b7:8b:cf:20:
39:db:a3:c6:bd:7d:65:e9:79:07:69:b2:34:fd:d0:e4:1e:01:
e6:8b:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:39 2025 by rpki-client