Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File: 9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier: MtloHzk3e34W5SFmhpZV0AG/7DhmnZOWy+GUGI5N1eg=
Subject key identifier: EB:A2:52:47:0F:8D:99:38:E6:93:2A:8F:99:AB:0C:84:B6:DC:38:7E
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer: /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial: 019847E5165B80250397E3D3B11CD97A993E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number: 136D
Signing time: Sat 26 Jul 2025 18:00:52 +0000
Manifest this update: Sat 26 Jul 2025 18:00:52 +0000
Manifest next update: Sun 27 Jul 2025 18:00:52 +0000
Files and hashes: 1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: wWfcM2izUTLJyvW7iBYt9C43gqnJqyxdEIt4vmCHdH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:16:5b:80:25:03:97:e3:d3:b1:1c:d9:7a:99:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Validity
Not Before: Jul 26 18:00:52 2025 GMT
Not After : Jul 27 18:00:52 2025 GMT
Subject: CN=eba252470f8d9938e6932a8f99ab0c84b6dc387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:11:f1:ac:b7:4d:39:ce:fe:cc:ee:9a:99:
fb:a7:b2:a4:d1:19:54:9e:ad:b2:c9:3a:0c:ae:56:
87:28:d4:bc:0c:5a:d6:ad:7c:22:3f:27:23:cd:df:
19:d3:4d:1f:4a:28:46:9a:b1:ef:a3:f5:5c:66:53:
b4:2e:23:fb:f3:8f:4a:4d:7e:05:76:d0:a1:24:c9:
d8:7b:05:e5:86:4e:b2:be:15:41:53:ae:6d:cf:fa:
36:5c:d2:6e:58:74:ad:09:9f:80:75:2f:15:ff:63:
bf:b7:f8:fd:58:7c:4f:fb:55:76:b1:79:d2:b7:d6:
d7:c5:32:ed:d7:ea:11:6d:3a:38:05:46:e4:b0:51:
98:a1:5f:84:2e:c1:3d:2d:15:40:71:d8:86:57:0d:
b6:1e:88:12:f9:b3:3d:ac:5f:bc:e0:52:91:cc:06:
83:db:b3:b8:78:3e:9e:98:c3:7d:a8:5a:85:ad:a9:
18:52:52:6a:b3:ee:0a:30:7d:3b:68:ea:57:e6:61:
da:6f:07:3e:aa:57:5e:b5:42:e9:ab:ec:33:fc:96:
c9:2f:cd:8c:b4:c3:41:9e:79:d4:c4:a0:70:58:10:
53:3e:7e:89:87:11:e9:bd:33:8a:b2:8a:2c:fd:c2:
1b:d1:7c:d1:e4:9c:c9:f8:2f:ac:7a:e9:df:79:13:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:52:47:0F:8D:99:38:E6:93:2A:8F:99:AB:0C:84:B6:DC:38:7E
X509v3 Authority Key Identifier:
keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:27:b5:dd:db:0c:fe:15:bc:59:56:93:b4:15:99:d3:00:
c8:cb:23:f7:de:e1:52:a3:bd:77:e1:2f:a2:fe:8d:87:6f:7b:
6c:c3:27:73:db:60:a4:31:a7:2c:72:cc:fc:1a:58:7d:9b:4d:
8d:fc:22:de:67:57:33:fd:6a:c5:d1:b9:7a:a5:da:a4:63:42:
7d:4c:a2:cb:56:6b:46:45:55:f5:97:c7:b8:e7:93:94:dc:ce:
b0:7e:4c:fd:e0:12:b2:ae:47:05:8d:6c:5f:ec:20:6c:78:e0:
79:fc:12:c0:47:20:de:a1:7a:1f:08:02:27:76:f9:2a:b7:b2:
5f:ff:8d:80:f3:b8:42:a6:f5:fd:ff:a4:f0:f3:47:2f:9a:6a:
53:8a:7c:64:93:f2:1d:ee:f5:34:bd:0d:34:a2:5d:35:03:f0:
94:ef:13:5b:40:51:3c:52:e3:41:3d:f2:e6:90:1e:35:f3:fc:
6a:fd:9a:7c:2f:70:1d:cf:52:c9:0a:d4:b8:56:b9:c6:fc:ca:
0b:88:99:36:2f:44:c5:f4:1e:70:b4:d7:b7:87:0b:57:2e:35:
6b:48:2e:e4:e0:a9:ad:e3:87:7d:39:bf:1c:dc:d8:28:d3:11:
e6:78:bc:8e:17:05:27:37:4a:01:96:e1:7e:24:01:86:92:07:
85:97:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:36 2025 by rpki-client