Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: FRuH0iVaUZJvR0hJIO+2HBvSOzAmieLP5hvU/61q+A8=
Subject key identifier: 5F:DE:3D:4F:8B:86:00:9E:A0:73:81:74:62:AB:BF:B0:D6:AF:3D:B5
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0199228C2C4C0F6ED750AC76FB07A425F5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 1371
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: sDdOI6Kn+r7yfCtYcCZzMJK7GEtqZweTZBSmr5PwOpc=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2c:4c:0f:6e:d7:50:ac:76:fb:07:a4:25:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=5fde3d4f8b86009ea073817462abbfb0d6af3db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:b6:e0:50:0e:31:dc:dd:68:4f:34:7e:59:
43:a4:a2:b6:e5:a7:3b:6a:5e:c0:de:cb:f0:3a:3d:
27:0d:c2:8b:85:75:cd:dc:05:b7:b5:84:b7:56:60:
30:69:ae:d9:13:b8:03:8d:34:64:34:ea:52:65:56:
07:9a:46:4b:aa:96:17:93:d9:34:f8:5d:56:1c:a4:
8c:e4:21:c6:e9:44:9e:e1:87:1d:ad:15:ca:1f:4f:
4f:d8:dc:e1:a7:45:d0:b7:eb:ba:80:85:46:0f:9e:
4d:22:33:38:c8:15:5e:7e:20:e0:5e:ce:16:2d:9d:
70:b7:f7:dc:de:3d:f6:c0:b0:8d:7e:b0:e7:9a:a7:
99:ab:99:5d:8a:84:87:be:03:d9:c0:9b:7a:bc:0a:
58:b6:8a:34:60:11:ca:c3:ac:05:d4:01:58:6e:cf:
f4:22:80:23:3a:c4:af:bb:56:2b:69:e6:2a:07:de:
82:e7:2a:82:3b:f3:c3:9b:f1:0b:46:77:8d:8b:87:
cd:da:93:60:39:ca:8a:63:e9:f6:b6:32:7a:05:71:
e1:f2:60:2a:64:2f:9b:8a:b7:37:c9:a2:e4:87:a8:
9e:d7:7c:a6:13:a5:20:44:f9:10:67:f4:8f:61:fb:
91:60:60:00:75:b4:af:17:9e:75:6e:80:ee:41:15:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:3D:4F:8B:86:00:9E:A0:73:81:74:62:AB:BF:B0:D6:AF:3D:B5
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f8:a5:b5:dd:20:a4:54:ae:2c:95:e4:52:48:00:ce:67:ee:
cd:aa:bd:21:9e:9a:64:1c:b7:42:43:c4:5b:53:32:8d:2b:55:
51:07:e7:27:0e:cd:20:f3:4d:0c:73:a4:b1:c6:21:69:0e:e9:
22:69:15:f9:04:98:d0:c8:77:f6:2b:1c:b9:3a:78:85:86:8e:
71:c8:33:fd:6e:0e:73:b6:4d:bd:8b:9b:bc:0e:ea:9e:77:5c:
88:d0:78:1f:2b:33:1c:d1:fc:9e:dc:25:50:c6:2d:f2:55:bc:
a4:38:6a:19:f4:cb:27:2a:73:57:a8:98:e2:39:ae:48:a2:bc:
87:96:a7:91:b4:85:9a:e6:24:bf:26:00:0d:ac:0a:40:f9:3c:
ee:5f:14:6d:70:9c:58:34:b6:6d:7f:38:23:70:1d:cd:f9:69:
2b:bc:42:53:99:82:fb:3c:62:83:5a:d5:04:e5:09:d5:ec:d5:
a1:a9:85:68:fc:a9:75:94:38:72:e5:79:ab:dd:06:f9:3d:18:
1f:75:cc:58:5f:4c:23:72:f8:32:ab:bd:3f:86:70:68:a1:a6:
84:5d:2d:7f:a1:36:63:7f:a9:1d:a8:17:76:e6:5d:ec:1a:80:
90:79:f0:81:6b:19:d4:bc:9a:c7:ff:b7:14:e5:51:bd:4c:fa:
25:eb:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:44:01 2025 by rpki-client