Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: NFTMV6p6p8RUggl0bWXmnSR/2U+QLPGORXnWgIcEL54=
Subject key identifier: 16:7D:0F:68:27:A4:E6:1F:FF:7E:2C:92:E4:7C:52:6D:04:EF:B8:03
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 019851FA55D8FDF077E8A353EAFF43AFDE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 0FFD
Signing time: Mon 28 Jul 2025 17:00:16 +0000
Manifest this update: Mon 28 Jul 2025 17:00:16 +0000
Manifest next update: Tue 29 Jul 2025 17:00:16 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: xsrN8j6NkYHjjANBhUHZkAxvBfA8a8rKw5ThRiTriVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:55:d8:fd:f0:77:e8:a3:53:ea:ff:43:af:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Jul 28 17:00:16 2025 GMT
Not After : Jul 29 17:00:16 2025 GMT
Subject: CN=167d0f6827a4e61fff7e2c92e47c526d04efb803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:a7:05:34:5c:e3:38:e7:c1:df:0a:c2:b5:
96:26:4b:c7:7a:0f:70:de:e6:20:c3:56:23:d7:de:
ad:40:3e:b8:0f:bc:cb:5c:25:4a:6e:64:a3:e1:71:
9f:f8:27:bd:2d:a0:6f:dc:09:d5:8d:9c:13:f9:bd:
d5:ba:ac:2d:49:4c:b3:e5:5e:6d:2f:8c:da:a7:8e:
b9:9e:87:1d:10:9f:57:11:64:52:fa:f1:0f:0b:82:
85:13:92:30:bb:95:a5:fc:5b:c4:60:c1:ea:7b:b4:
10:a8:ee:f0:4e:56:d1:50:ec:3f:c3:df:e9:00:9e:
3f:6d:88:47:14:db:71:18:60:95:2e:26:23:c4:e1:
a6:1d:b4:0f:57:86:2d:47:bd:b6:bb:79:52:b3:a3:
6b:1d:75:65:75:13:9c:6a:fb:35:39:4b:39:b2:e1:
3c:35:ce:02:72:3b:99:30:3f:04:65:ac:26:c3:5e:
61:ff:78:55:b9:3d:ce:90:e3:4e:d7:16:ef:65:b9:
75:fa:a6:f8:cf:1c:13:a8:27:ae:c0:07:93:9f:b8:
2e:e1:d1:38:ac:a4:01:3b:d9:9f:ec:63:79:af:f2:
bc:71:fd:b5:6c:b8:3c:0e:fd:d7:09:ba:27:cd:36:
99:9e:0d:4c:46:9c:a6:df:3a:da:28:fc:7d:84:ce:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:0F:68:27:A4:E6:1F:FF:7E:2C:92:E4:7C:52:6D:04:EF:B8:03
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:ec:1b:df:c2:9a:ec:ac:57:f0:19:1b:e8:4a:43:f5:7a:
95:6b:83:f5:cb:ac:9e:5b:13:0d:be:36:80:85:e6:bc:86:a1:
24:3f:a6:ba:f5:15:f9:07:41:35:e5:db:26:0d:f8:3b:f5:d8:
0f:15:79:8a:5e:6a:2a:15:b3:88:bd:89:fd:4b:e7:7e:ba:81:
41:0b:a1:8b:7e:46:11:54:e2:7e:ee:4d:69:b1:68:58:fd:7e:
eb:0b:f1:be:d2:61:79:fa:81:23:a8:57:2e:2f:df:6e:98:5f:
4d:f5:51:7c:59:b7:87:53:41:35:59:14:00:7b:82:5c:ea:bd:
47:7d:f3:1e:2b:70:e3:c2:cc:15:87:9c:c2:ee:e0:b8:df:df:
d4:98:cf:9f:7c:01:14:dd:43:4a:2c:5f:df:74:8d:65:b6:a6:
a4:26:8f:c2:05:75:ba:c1:ab:43:a8:81:61:b8:3b:f5:63:b3:
57:07:9c:44:25:66:b6:b1:bf:ff:73:48:df:b2:a4:ac:22:2c:
b6:af:a3:4b:d2:d4:5a:3c:e6:4f:43:b2:d5:d5:84:0b:c6:1c:
fe:f3:51:31:7d:39:89:48:87:97:60:e7:c7:55:e2:8a:6b:f7:
29:35:50:84:ff:ed:a2:9e:79:73:09:2c:fb:cf:da:32:b0:91:
b5:31:a1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:45:47 2025 by rpki-client