Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: jcmILSxnhk5NECkEXhBC3YQ3mSIhaYF0v4Ur4lOmjaU=
Subject key identifier: 1A:7D:21:25:4F:78:88:24:B7:69:69:27:B4:02:0D:54:9A:30:30:08
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 0199228C6B9F206E86B9EED34D9291477943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 018E
Signing time: Sun 07 Sep 2025 05:00:51 +0000
Manifest this update: Sun 07 Sep 2025 05:00:51 +0000
Manifest next update: Mon 08 Sep 2025 05:00:51 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: vsC3P80BDlEIZUKkWMUHjh/hsROHicocJ1duZH1OaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6b:9f:20:6e:86:b9:ee:d3:4d:92:91:47:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Sep 7 05:00:51 2025 GMT
Not After : Sep 8 05:00:51 2025 GMT
Subject: CN=1a7d21254f788824b7696927b4020d549a303008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:b3:d7:7b:c1:81:f9:59:29:63:dd:8d:bf:
97:50:cf:1f:77:a4:ba:42:fc:ab:21:1d:0c:b5:d2:
49:c3:9b:0e:3e:e8:19:0f:2f:62:15:a5:36:35:78:
cd:71:ad:60:bf:4b:f4:ba:85:50:49:21:84:17:3e:
5b:4b:68:ef:2d:a4:4f:51:30:66:7b:3d:57:92:3b:
63:ca:f7:60:19:93:ea:e6:d6:f4:59:61:1f:79:1c:
42:5c:fe:fe:bf:5a:2e:64:4d:4d:71:62:eb:82:99:
9f:fe:12:4f:49:7c:7e:da:2c:ff:5a:43:80:70:5e:
74:62:c3:3f:92:7c:84:3e:75:c3:e8:18:04:04:37:
17:02:88:60:c5:51:41:4f:71:fd:ac:f1:79:9f:2c:
8f:ab:bd:bc:94:16:a2:5f:e7:d7:70:2a:9e:1e:eb:
4f:83:9a:6b:6d:93:ec:37:51:19:96:b7:40:cf:9c:
19:55:af:c4:3c:9e:de:0e:0f:15:ea:95:9e:73:1c:
2e:0c:fa:61:72:52:38:b9:9d:41:0f:4e:1e:4f:a7:
18:6e:3f:38:9e:49:58:6d:a4:32:0f:70:62:79:fd:
3f:fd:69:87:11:64:14:01:58:a9:33:4b:70:05:8b:
f4:63:b5:2b:34:cc:3f:16:76:59:cc:be:c6:bb:09:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:21:25:4F:78:88:24:B7:69:69:27:B4:02:0D:54:9A:30:30:08
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7a:c3:6c:40:87:5d:30:64:92:58:01:0b:83:9b:57:45:b0:
fe:42:60:4d:bd:c1:41:43:69:67:70:c1:d4:53:db:5b:ed:d1:
06:13:72:fc:71:40:98:9a:e9:76:27:f4:98:ed:cb:54:6d:c0:
3a:dd:63:fb:4c:48:fc:3a:5b:02:10:fe:53:8c:9b:f5:f3:4d:
54:38:d4:1a:56:78:d8:ec:84:8c:45:0a:76:d0:f5:cd:a8:c4:
79:cd:1b:88:47:b3:71:e1:92:fe:79:a9:25:0f:91:62:4f:27:
ad:7d:7c:20:fa:de:1f:6d:65:45:4a:fb:1f:82:0b:46:5b:af:
82:ec:1d:f1:75:f0:46:65:5e:70:5e:b0:a9:ff:e0:ac:e9:7a:
d7:10:4e:fc:7d:1e:cd:3e:c0:a8:81:44:97:a9:b6:f2:3f:dd:
3c:a1:db:eb:3a:f7:d6:6e:69:5b:21:32:40:5a:b0:da:38:50:
ae:6b:ef:be:61:7d:90:79:d3:69:09:24:eb:a0:4b:d6:1e:d7:
38:35:28:52:56:fa:1d:c7:34:45:38:14:68:78:f1:be:c5:2b:
76:3d:84:3c:52:f4:76:e4:26:8e:dc:69:4e:90:2d:b9:4f:52:
b7:39:c5:42:29:c6:fc:7b:17:2f:6f:11:07:a3:a4:a0:b0:be:
80:1b:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client