Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: qSn4/wkt+5b/96KTKP/J/dU6gfGOIOr/PEspgOMwsQA=
Subject key identifier: 72:B4:D8:68:6A:EF:22:01:60:7E:E5:89:76:6C:6D:8E:56:29:33:AC
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 0198477699E4C3D99AF943A16105348FADBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:11 +0000
Manifest this update: Sat 26 Jul 2025 16:00:11 +0000
Manifest next update: Sun 27 Jul 2025 16:00:11 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: klzYf7XWsVX5Vj5qyxTuUmqzMeyx92BqVwI70vgBy44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:99:e4:c3:d9:9a:f9:43:a1:61:05:34:8f:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Jul 26 16:00:11 2025 GMT
Not After : Jul 27 16:00:11 2025 GMT
Subject: CN=72b4d8686aef2201607ee589766c6d8e562933ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:88:4a:c3:1e:26:92:04:bb:50:de:58:54:
34:98:ed:9e:77:f5:13:86:ef:63:27:0d:04:f7:02:
8c:91:f5:f3:17:2f:07:cc:f5:41:ba:f4:e0:55:72:
95:2a:c4:02:be:44:cd:d4:6d:cd:63:f6:82:d1:07:
7e:6e:71:ed:3e:81:d3:c2:db:d0:b9:b6:d1:ba:aa:
56:25:c9:bd:0f:04:e3:a4:6a:bd:7a:5b:a1:3a:1f:
37:93:f1:90:96:64:07:38:b1:73:5f:ca:9c:7c:87:
54:3e:7d:7f:d0:83:29:ba:cb:48:b1:2c:7d:cf:22:
cc:0b:c2:fd:e7:0b:13:03:62:d1:af:f6:6a:e9:29:
dc:90:f3:39:56:ba:13:f7:3a:52:be:1d:58:e1:7d:
2f:48:71:45:a3:28:48:c7:d4:41:7e:81:26:0d:64:
05:70:24:68:5f:c9:fb:c7:39:a3:ca:b9:26:fb:85:
11:07:58:a2:00:95:c0:05:73:95:db:ab:4e:a9:33:
cd:e0:fc:c4:08:56:b4:2a:16:2e:dc:b9:c3:1e:53:
42:91:3d:d9:6c:29:74:ed:51:09:24:da:49:cf:26:
86:29:ca:66:3d:29:41:8b:1f:f9:48:f1:d6:35:fd:
65:42:45:dc:43:5e:10:df:6c:78:17:37:ed:09:d7:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:D8:68:6A:EF:22:01:60:7E:E5:89:76:6C:6D:8E:56:29:33:AC
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:e9:a0:d9:64:57:a5:f0:80:d8:33:02:72:7c:7b:2d:7f:
96:85:94:4b:b6:e6:58:f8:00:43:5b:9e:29:35:fe:e1:a2:61:
fa:5e:04:22:ce:df:55:10:9b:b6:34:a3:21:20:50:8d:bb:29:
db:61:ad:53:7a:fe:15:b7:02:48:3a:9d:90:15:60:e8:4b:c9:
5b:42:6e:01:5e:b1:d2:ee:a4:44:21:1d:38:50:61:dc:0e:1f:
df:27:ca:8e:72:3c:da:b1:9b:89:05:12:b5:4e:04:81:c5:65:
9b:85:c2:00:fa:7e:0a:4f:10:83:12:bb:3d:75:b0:30:f4:c2:
4c:49:12:aa:aa:e4:50:9b:e5:2c:7f:c2:eb:3a:45:56:0f:84:
2a:62:cd:19:c0:be:7c:6d:44:83:64:aa:0e:71:93:56:dd:ee:
b1:0d:31:25:3a:fb:fb:50:ce:5e:96:c5:a1:d2:6f:98:7a:5c:
03:f8:bc:89:36:04:ca:83:23:5b:b0:c5:af:97:e5:09:bd:7f:
63:b0:8b:f6:f5:fc:d5:f0:2f:92:a6:38:fd:54:87:ab:57:c4:
c2:1e:af:fe:ab:8b:7f:9f:05:1d:ed:e2:c5:c2:76:e8:2f:7e:
e2:94:6c:34:46:b0:31:ac:3d:6f:27:66:e5:c5:e3:01:91:83:
34:78:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:33 2025 by rpki-client