Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: zgQZBIHagDVCxpX62eODlh7jOpfYYpEXaaHNbIWQ3Bs=
Subject key identifier: 23:13:A0:78:F5:73:EC:68:E3:63:8D:8B:42:CF:25:BF:11:ED:C9:EA
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 01983803C195B9A1A6C07D94B81C63CE2F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 15F5
Signing time: Wed 23 Jul 2025 16:00:26 +0000
Manifest this update: Wed 23 Jul 2025 16:00:26 +0000
Manifest next update: Thu 24 Jul 2025 16:00:26 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: ys88eybHc+TYqWwTycp6iWseDiykVIoWHN/xi4l1YiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:c1:95:b9:a1:a6:c0:7d:94:b8:1c:63:ce:2f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Jul 23 16:00:26 2025 GMT
Not After : Jul 24 16:00:26 2025 GMT
Subject: CN=2313a078f573ec68e3638d8b42cf25bf11edc9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:fd:a5:69:87:5a:cd:df:58:83:b7:3e:e0:
8a:62:8e:91:02:c7:15:fd:66:d9:5d:db:0f:44:52:
11:b1:3a:1e:f7:6b:f5:c4:72:ce:d2:a1:3a:49:55:
67:f5:f8:b0:66:2d:e5:78:1f:80:22:07:96:b0:00:
4f:54:af:8e:d7:dd:79:61:ef:ac:4f:a7:72:da:cd:
e9:aa:38:ed:7f:ed:ef:ac:6e:78:da:87:3e:cd:f1:
c2:2e:39:b5:82:e8:f0:fa:53:36:c0:e9:b1:b7:e7:
8a:f3:59:20:84:84:77:e8:fe:a8:81:4d:3c:f5:49:
69:39:ec:2a:68:2c:09:5d:52:a2:53:94:21:ed:11:
b8:ba:94:8a:1d:51:8c:34:a0:49:0a:1e:d4:18:66:
53:26:5d:87:ca:e2:e5:8c:a0:af:16:9a:cf:c7:70:
d1:d1:f7:ee:22:fe:0a:53:33:b3:fb:b0:fa:85:c5:
26:ca:65:2f:30:03:4f:f4:df:38:72:fe:08:8d:cc:
e3:8d:cd:9b:2d:bb:09:56:e3:7e:a8:fe:e0:6e:96:
8c:fc:44:94:0d:5e:0a:38:f5:a6:ee:3f:88:e9:51:
bb:78:ee:00:ab:d8:81:64:25:d0:34:b5:5d:b5:f7:
9f:8d:2e:3d:20:ff:70:64:6f:4d:fa:8d:8e:1e:ee:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:A0:78:F5:73:EC:68:E3:63:8D:8B:42:CF:25:BF:11:ED:C9:EA
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a6:3d:ba:40:8e:65:d7:1c:a3:fe:34:99:18:9a:df:95:a8:
5d:8f:e1:82:4b:00:e0:8f:a8:fb:18:1c:8a:0e:11:17:8c:18:
d7:64:19:e0:6c:2f:d5:f4:4e:40:5b:24:e7:b3:1f:e4:24:37:
9e:e5:05:7d:7a:9e:7d:b9:88:1d:d4:a4:03:01:a2:d0:bf:66:
41:ce:43:0c:b2:6a:3e:e0:e2:a6:93:9a:b3:58:8e:dd:94:2d:
6c:e7:27:de:1d:14:22:fc:a8:63:f5:b8:c8:28:bc:ec:32:25:
2b:fe:a9:eb:0c:c3:05:81:d6:ea:0f:13:dc:4a:86:bf:6a:a6:
56:32:7f:08:30:34:de:04:0a:4a:70:b2:4b:3d:f1:23:4e:b7:
44:ae:80:74:54:a0:70:bb:74:7a:9b:04:80:06:14:af:d5:71:
3b:d6:4a:88:b7:3d:cc:6b:cb:af:e7:cd:ac:ad:0f:f9:5d:e5:
fc:ad:0b:a1:8a:11:6f:cb:21:45:70:13:c1:6c:8f:07:37:db:
89:5f:78:46:d4:c7:52:54:8b:e7:3d:1e:ad:0b:bd:9f:c9:22:
d7:f6:86:3b:a1:a5:72:38:80:e2:32:ab:6f:59:80:57:45:df:
91:8b:c1:0a:59:98:87:75:50:25:a4:4a:50:f7:8a:3a:17:40:
2b:7f:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:51:59 2025 by rpki-client