Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: iUJ7gWikZSSNLwuQg2vm58VlOvg7tzRqep/5C5LT8Y4=
Subject key identifier: 8E:49:8F:19:F5:0C:24:24:93:0A:A7:6C:0E:67:F5:8C:21:D6:9E:76
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01984965050F724D7FB3D004EAB87EFEAD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: zstHilyNxRSgLQxEbwOWTV2iFnRDwXqUK0+2kNAL1Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:05:0f:72:4d:7f:b3:d0:04:ea:b8:7e:fe:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=8e498f19f50c2424930aa76c0e67f58c21d69e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:72:99:eb:08:db:ad:29:bf:d2:ad:1f:f0:
ad:85:66:40:3e:1c:58:95:f2:2d:5b:04:75:84:15:
1a:fc:80:40:b3:15:83:8f:88:6d:04:08:b9:31:30:
23:4e:18:a9:43:43:d2:8c:4e:fc:ad:d1:ea:78:27:
32:dc:84:71:96:04:7b:b4:af:ee:3d:6a:f4:7f:63:
61:cd:39:aa:35:f2:f8:47:a8:7c:44:84:99:cd:80:
5a:43:02:f6:2d:72:dd:11:75:a7:38:56:0c:23:c9:
a8:28:1f:9c:9c:cb:47:c8:40:84:35:48:6d:9f:39:
d6:a8:0f:a2:23:a3:4f:32:72:26:27:26:6c:c5:ae:
cc:f1:2e:df:50:cb:5b:76:0a:97:c3:fa:c6:03:f1:
cd:f9:92:43:e8:3a:6e:36:da:68:50:02:25:98:46:
e8:56:10:c8:66:7b:7b:f1:5b:ad:d7:3e:54:b6:df:
b2:34:af:39:26:87:00:80:ca:7e:c2:2e:9e:b2:42:
0a:6d:b7:88:24:33:98:30:3b:f1:99:92:85:b2:e5:
b8:ac:bf:6a:fe:fb:3a:7d:51:ba:22:20:6c:d3:4f:
33:54:4f:25:16:16:42:22:50:a9:e0:12:6a:92:ad:
93:93:09:1c:98:ed:0b:9e:5e:76:68:99:8c:75:ab:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:8F:19:F5:0C:24:24:93:0A:A7:6C:0E:67:F5:8C:21:D6:9E:76
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:04:25:22:a2:3f:ed:03:ea:e2:de:1c:a3:f7:64:c4:58:
0f:0f:0b:18:ce:47:62:f5:d2:08:54:6b:ef:32:54:1a:2c:3a:
79:ad:35:10:3f:1a:26:5d:9d:9d:02:35:66:be:06:77:85:a3:
9a:5e:c0:91:29:2e:a0:db:cb:50:98:f0:b1:5b:47:7e:d2:88:
be:ec:d0:6b:88:41:8b:3d:91:bd:15:7b:8f:c1:9c:88:a8:21:
63:47:e4:96:7e:4f:89:3c:35:df:5f:c3:ed:e0:6c:cd:76:01:
3c:3f:ad:32:5d:55:f9:55:c1:51:5a:cb:74:77:63:49:6f:ee:
c4:6c:74:3b:d7:65:63:5f:cb:8b:39:57:d3:81:7e:78:c2:70:
9b:37:55:3f:1c:3c:32:72:8a:f7:4f:4e:26:4f:b9:c3:12:44:
a7:7e:c7:3f:99:7b:be:91:d4:e1:dc:b5:a7:4a:55:0a:2b:98:
f5:e5:4f:42:09:3b:57:7d:e8:ba:af:a1:be:b2:f4:5d:2b:d4:
76:92:8a:ea:79:a6:16:3d:4b:57:0f:c7:7c:b7:f3:b7:f7:a3:
d7:c8:46:03:8a:82:44:0b:ce:d8:80:e8:c3:ec:2b:43:bd:18:
36:e0:72:23:da:5b:1f:5f:80:5d:0b:13:dc:a6:c0:30:15:ac:
84:85:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:35 2025 by rpki-client