Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: wnLPpbgAzYFplmTLPwLuYPP7VXbgviWxd7UzlWjU6hc=
Subject key identifier: 23:C2:5E:3B:94:48:00:E0:BB:29:91:FE:0D:5A:32:28:EB:AB:D0:EE
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 0198477800B5486A0365F22F77117126DD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 032F
Signing time: Sat 26 Jul 2025 16:01:43 +0000
Manifest this update: Sat 26 Jul 2025 16:01:43 +0000
Manifest next update: Sun 27 Jul 2025 16:01:43 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: Qw4XkYIHD2vbYgnH5maOPwhX2UPyMgk/Hu1y21hEKdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:00:b5:48:6a:03:65:f2:2f:77:11:71:26:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Jul 26 16:01:43 2025 GMT
Not After : Jul 27 16:01:43 2025 GMT
Subject: CN=23c25e3b944800e0bb2991fe0d5a3228ebabd0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:ff:b8:6c:4f:b7:b9:33:61:cf:02:2f:0f:
aa:ac:2f:9f:90:99:7f:14:e5:5d:33:60:74:8b:1c:
41:f4:f8:ba:45:64:7f:9f:7a:db:62:41:55:27:71:
60:9a:cf:dd:e5:52:3c:ad:ea:e9:8b:65:9a:8c:26:
13:de:95:cd:06:5e:c4:39:f0:f3:f9:1e:7e:fd:c3:
11:e0:fe:01:b4:73:3f:1b:0b:a3:92:b3:4b:d6:28:
62:8e:c6:00:9a:ee:6d:8b:8c:c7:c0:3c:e8:31:25:
d1:ba:1f:b8:15:8c:37:96:a4:c1:ef:4f:46:ee:b5:
bb:9b:24:3b:d7:f6:10:7b:63:0c:16:38:89:c3:43:
ef:9e:4b:e7:8f:2e:17:cb:01:4f:25:23:49:95:6c:
d8:37:72:13:13:ed:94:a8:58:67:f4:51:2b:00:7d:
af:b6:fb:26:cb:0b:7e:82:7d:db:82:6c:27:6c:a8:
3a:a1:66:ca:ae:6c:47:2f:bc:4b:f3:25:69:93:56:
9e:08:b3:1b:6c:f0:95:89:51:59:94:8c:10:76:a3:
88:14:07:7d:1b:00:b3:7d:08:17:75:2e:21:d6:9f:
dd:a0:19:1b:b1:8c:9b:fa:28:2b:e7:67:a5:5a:59:
17:bb:79:8d:64:20:fd:60:88:79:0a:fe:5c:3a:b9:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:5E:3B:94:48:00:E0:BB:29:91:FE:0D:5A:32:28:EB:AB:D0:EE
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:2f:2b:96:52:4c:69:af:ac:8d:aa:47:e3:b9:e2:d4:ec:
fa:34:e6:c9:8d:e9:98:b8:d6:6d:ff:52:1d:99:78:d4:4e:b3:
5c:6d:27:96:55:bc:0f:4c:4f:ea:4e:85:8f:28:b2:d2:95:fd:
b1:4e:e0:11:40:76:50:37:97:f2:68:cf:a0:f1:e7:a5:d9:c9:
8b:8c:e5:e8:d7:f8:dc:cc:1b:97:75:25:20:72:a2:b4:c2:2e:
4f:15:0d:09:23:91:62:11:80:8c:91:13:f7:d6:42:1e:fc:c7:
2a:14:bd:cf:23:f8:a1:5e:bf:85:fa:16:fd:4a:c9:50:81:b0:
04:30:56:2f:b1:e0:31:07:06:4c:37:60:31:61:cb:ec:1a:74:
bb:02:d1:fd:a4:5b:ae:3c:92:ad:5b:af:6d:aa:cc:2d:fa:7d:
88:32:6e:d5:a1:95:32:20:c0:75:76:51:4d:47:80:1e:f0:e1:
75:ec:df:45:d2:1e:75:f6:28:3b:9f:b5:d0:bc:89:21:93:b8:
f7:94:f5:e7:56:ad:58:ea:7c:da:19:2d:5c:58:35:4f:67:71:
ff:b1:dc:4f:a9:29:1b:6c:c7:ce:36:6a:34:24:7d:c5:e1:65:
5e:95:0f:1f:41:aa:7d:3a:0b:c4:93:94:72:ee:67:44:ec:07:
be:bf:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:57 2025 by rpki-client