Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: LZoxmZNbyloOWn0IixnOLy9MYUkUw8TM0Vgdgvo379M=
Subject key identifier: 35:42:45:9F:6C:32:34:61:00:2F:E0:FC:F0:7F:B4:46:83:37:28:AF
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 0199228CD9DCE545CE23F37BEE1E8F80A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 13F7
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: TfvDSLxZh7EQ7JT3JS6wQ3ojV3pEXy738+4iArFAkao=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d9:dc:e5:45:ce:23:f3:7b:ee:1e:8f:80:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=3542459f6c323461002fe0fcf07fb446833728af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:52:3d:57:50:68:9e:1c:81:c9:a1:d4:9e:
07:11:23:32:6b:fc:d3:e3:79:9d:5e:a6:23:d9:26:
4e:97:f4:c1:1b:0e:01:c0:8d:43:c9:04:ba:cd:02:
b2:df:ff:6d:09:4d:44:72:d9:5f:7d:a6:15:fb:ec:
ee:73:0d:4b:ca:13:96:f6:57:6a:56:79:24:e4:78:
d0:7f:89:30:7c:88:0e:ae:b9:7c:69:bf:32:bc:3a:
b1:73:d5:60:10:32:cc:67:11:e9:13:a9:55:43:7e:
75:91:97:21:5b:0e:ea:5f:d0:0d:c7:e6:90:8c:9c:
3f:bc:4f:49:d5:0d:bc:93:4d:1a:4f:91:6a:9e:a7:
f7:51:30:ac:c1:04:e0:b7:ef:db:71:00:bd:56:e0:
d8:d4:87:86:fe:84:62:99:44:37:d7:c1:f0:66:ae:
25:0f:99:e4:f9:61:e7:12:d8:bf:5e:72:00:c9:5a:
0e:d7:2f:a9:c9:1c:00:b2:f8:01:08:25:a5:1f:02:
64:ac:8e:12:df:d1:1b:33:c4:22:ea:b9:5e:82:d8:
4b:2f:e8:43:18:87:81:74:43:e0:96:bd:36:31:ba:
03:a8:d9:e5:c0:ed:e0:0a:f7:e6:39:33:d4:a4:76:
3c:6b:a1:24:cc:c1:b7:23:98:e1:bd:93:05:0e:62:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:45:9F:6C:32:34:61:00:2F:E0:FC:F0:7F:B4:46:83:37:28:AF
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:d8:f4:45:29:51:bc:48:2f:c2:e3:f2:d1:50:6d:60:c9:
cb:c7:96:35:27:73:d0:1b:27:97:22:be:68:f3:34:82:06:5a:
b0:ce:fb:55:d7:69:9b:2d:9d:5e:51:dd:75:f4:61:20:fa:b7:
4b:0d:e5:64:03:62:c8:39:12:bd:7d:45:16:66:e9:50:25:ea:
c0:a2:9d:35:d2:e1:46:6c:75:61:75:10:07:c8:24:85:05:be:
d5:6e:a9:f6:8b:a7:db:dc:1e:e7:23:ce:11:7a:90:9c:7a:e5:
09:25:3b:2a:75:fa:7d:c1:44:1c:d7:af:8a:aa:b7:bd:d9:5e:
b8:8b:cb:f4:d3:37:be:64:b3:29:f8:55:22:ab:db:25:69:b8:
04:ab:5e:ac:1e:60:fc:fb:7d:28:50:37:50:03:6d:ae:b9:76:
25:99:ae:18:3d:a5:26:0a:6d:b2:d7:bb:39:e9:4c:f1:b8:82:
3f:18:0b:da:0a:06:d6:59:f0:27:5f:cc:2c:7b:a1:05:ba:6e:
84:39:88:9c:1b:0e:60:38:6f:4c:7a:ed:9c:2c:8c:3f:88:aa:
86:bf:26:42:f2:55:48:3c:ab:67:cc:c6:20:9a:b0:d8:24:db:
e8:ff:24:31:b3:a7:b2:8d:af:38:df:4b:3e:7f:e0:b6:06:85:
3c:c4:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:06 2025 by rpki-client