Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: UVr9e1hvUJ6DoN5wTngyLJlvJ6b6XF41HB/84+pPNds=
Subject key identifier: 5F:EC:8D:E6:41:82:DB:CB:4F:26:AD:DD:D4:E7:57:DA:B3:81:A9:6F
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 0197488C4DCCB27D679BCD3400D352C6A8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:00:43 +0000
Manifest this update: Sat 07 Jun 2025 04:00:43 +0000
Manifest next update: Sun 08 Jun 2025 04:00:43 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: dqCLG50s9x59Lp+SI1xpLJ6Qm3RrHgr4duGP3j5A4oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4d:cc:b2:7d:67:9b:cd:34:00:d3:52:c6:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Jun 7 04:00:43 2025 GMT
Not After : Jun 8 04:00:43 2025 GMT
Subject: CN=5fec8de64182dbcb4f26adddd4e757dab381a96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:bc:12:42:fb:31:83:67:cc:b3:1f:3e:29:
96:fc:ec:3b:c8:7e:6e:94:e9:68:e3:c1:d4:e8:30:
d9:b5:d1:2a:3f:fb:55:88:cf:cb:38:f0:2b:7f:2d:
30:70:02:ca:6a:42:62:2d:d1:57:73:58:1f:7a:f4:
4e:63:9d:0d:c7:97:b8:ed:7c:da:d4:6c:b9:72:da:
d4:0c:9f:24:ee:61:7f:4f:fe:6d:7b:b2:e8:ea:b2:
43:71:d6:b5:2c:16:a6:bf:62:40:99:19:3c:14:1e:
93:ba:4e:72:e6:f8:2c:79:b8:8b:3a:ad:6d:7a:17:
35:cd:2a:4d:71:9c:9f:39:fd:61:a6:a7:41:97:0f:
dc:4a:b4:d7:92:38:8c:27:bd:e6:ef:db:1e:73:42:
e0:73:9c:72:b6:45:ed:b0:d1:4c:b2:7f:5e:29:f4:
05:76:77:c7:a5:17:8a:44:c7:2c:2b:3d:34:fa:39:
91:73:94:7f:39:bb:ce:1c:82:e7:b8:72:77:65:01:
59:b7:6f:d5:eb:ce:7c:63:a5:7e:c9:74:1a:2c:f5:
7f:b7:7f:d2:f6:0e:21:5f:24:bd:d9:b5:b0:8f:2a:
7b:3f:7d:0d:48:1d:7e:6a:e9:7a:16:c6:3f:17:39:
0f:3b:f8:1e:53:a9:3f:81:04:67:4a:05:f9:f1:c9:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:8D:E6:41:82:DB:CB:4F:26:AD:DD:D4:E7:57:DA:B3:81:A9:6F
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:fe:fd:85:c0:2b:dc:1b:cb:24:bb:40:9a:39:3f:59:89:
44:fb:9d:27:08:f6:00:5f:a7:0b:ec:bd:8a:59:e7:6b:d0:54:
57:9b:bf:47:42:67:fa:c9:7d:81:aa:4c:ba:e8:13:4d:94:72:
da:e2:28:d6:d0:d0:bb:0c:fd:18:38:b3:02:39:70:89:42:22:
8e:6a:26:a8:d6:76:cb:8a:1e:96:e9:7a:dd:e0:cd:30:e0:e7:
e1:c7:72:4c:c8:2d:49:b9:b1:65:f2:35:e5:17:9a:9b:55:89:
45:c8:91:02:b9:42:8a:85:38:6b:c9:f1:11:f5:d8:d9:e5:15:
e8:7c:5b:72:4e:da:9b:68:c3:dc:6b:73:79:6a:49:9f:25:a1:
1a:99:96:7e:fc:4e:73:d8:24:31:84:ff:1e:b1:1d:95:17:3e:
4c:24:6d:b5:5b:c9:5c:c5:e7:0b:2e:3f:9b:a8:7d:f1:58:cc:
b5:b8:26:c2:27:5e:31:ef:a6:62:fe:98:b3:1d:11:95:94:51:
46:cd:1d:7d:f5:8c:14:ca:16:af:df:54:14:f2:e8:65:9a:0c:
d0:87:dc:8b:b3:34:a2:4d:89:c7:8e:29:11:19:0f:01:97:d4:
64:27:85:c7:55:7b:56:8f:7b:03:cd:69:36:2b:16:90:28:71:
aa:62:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:44 2025 by rpki-client