Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: yIe2tanOHOP1UQ8aKOF4b3hl5vbl4xw8bab3MwgCM1I=
Subject key identifier: 09:1B:E8:99:96:51:80:7D:CE:F3:CD:C4:C6:9A:35:06:82:88:13:D5
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 0198CACA2039878A7712FE9D4DD7DEDA6EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 162A
Signing time: Thu 21 Aug 2025 04:01:40 +0000
Manifest this update: Thu 21 Aug 2025 04:01:40 +0000
Manifest next update: Fri 22 Aug 2025 04:01:40 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: aiMTe8CSTChQhaOaRVv5sOHj5gKLQ8WuknnK58caXsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:20:39:87:8a:77:12:fe:9d:4d:d7:de:da:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Aug 21 04:01:40 2025 GMT
Not After : Aug 22 04:01:40 2025 GMT
Subject: CN=091be8999651807dcef3cdc4c69a3506828813d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:c4:26:3f:52:00:49:d3:5a:fe:9e:44:87:
34:46:60:39:aa:8a:4a:06:6e:0b:ce:7c:c8:93:f7:
fe:ff:4b:a1:12:d7:20:3b:e9:9d:9a:67:33:68:8e:
b7:95:b1:31:f1:07:cc:88:c9:fd:e5:90:00:54:ed:
11:5b:37:e6:3c:b7:83:2c:c9:b9:18:44:1c:04:06:
24:c3:2a:83:fb:34:cb:f9:f7:9c:d9:d7:75:9a:ba:
86:b2:79:83:14:92:7f:39:fd:8b:eb:b7:1e:2c:8d:
90:ba:7b:53:3f:a6:c0:90:84:32:9b:61:24:ea:6b:
96:68:ba:3f:f8:d8:45:ea:a7:97:c4:99:35:70:84:
89:ec:97:cb:9d:62:a8:79:e5:d7:7b:63:b8:e8:2b:
43:29:57:2a:48:e5:a1:1d:85:e6:99:0f:3c:a6:3c:
01:93:95:42:27:cc:41:72:3c:83:79:cf:4f:12:ea:
8a:99:b5:d6:55:7d:d6:5f:98:a9:63:da:e4:6a:bd:
bb:f2:da:8d:be:74:d0:f1:55:31:49:4c:8a:84:90:
35:fe:dc:30:ba:46:aa:49:b5:0d:d4:9e:ee:ae:0b:
d1:1c:66:3b:9b:6b:82:bf:ae:cb:43:e6:1e:6c:e0:
c2:d5:27:e0:a2:bf:fb:68:2a:17:f6:05:69:34:1c:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:E8:99:96:51:80:7D:CE:F3:CD:C4:C6:9A:35:06:82:88:13:D5
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:6a:09:ef:28:10:99:91:a2:9e:9e:6f:08:a0:08:7d:f6:
1c:5d:9d:0e:52:b9:16:bf:12:a1:e9:d1:5f:bb:f4:c4:20:f3:
79:2e:30:10:0b:26:94:63:ed:7a:ff:f0:14:0d:e8:3e:d9:22:
7a:5b:6d:ca:f6:e6:8d:14:76:0c:ad:13:9b:af:57:71:f8:04:
2d:6d:2b:ac:2f:1b:8f:cd:6d:b2:eb:83:5e:ea:50:35:8c:9b:
00:50:b7:a3:cd:13:7f:b3:71:a4:ca:55:ba:21:5f:d9:74:6d:
86:a6:4b:39:b2:6f:a6:e5:93:77:da:be:e2:8e:9b:8f:ae:ec:
01:72:0f:5f:c3:51:7c:7f:17:93:bc:8d:a8:e0:23:b6:96:41:
a0:bf:22:cc:85:97:5f:fa:d5:7c:36:7c:52:c0:f0:83:57:8d:
c7:aa:76:77:11:4b:c2:fb:87:e3:51:d0:04:1f:74:3c:02:59:
c5:5f:b0:3b:db:6c:a1:85:54:ef:ba:d9:c3:3c:53:62:13:3a:
23:6a:c1:82:b9:25:60:13:57:b1:cd:82:e4:e5:df:c3:5d:70:
bb:b9:a1:c6:24:39:4b:65:1a:b2:77:cc:0f:7f:d0:ea:13:8b:
12:e1:f8:8f:c1:22:1a:d8:36:d5:df:c6:0f:37:db:1c:ce:2d:
39:8b:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:38:51 2025 by rpki-client