Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.mft
File: SHLl9iwssTUg5fKe35HpNLXkByQ.mft (raw, json)
Hash identifier: 1CzIWyz7LUQPR8hNuEjK5dCzsy8Lr4Daf+SeZTB18SM=
Subject key identifier: BB:E8:B7:50:90:FD:8B:75:7D:9D:E6:57:2A:81:FA:6E:1D:D5:9A:C9
Authority key identifier: 48:72:E5:F6:2C:2C:B1:35:20:E5:F2:9E:DF:91:E9:34:B5:E4:07:24
Certificate issuer: /CN=4872e5f62c2cb13520e5f29edf91e934b5e40724
Certificate serial: 019922FABAD952740122E1845AEE1DB44FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHLl9iwssTUg5fKe35HpNLXkByQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.mft
Manifest number: 0B
Signing time: Sun 07 Sep 2025 07:01:21 +0000
Manifest this update: Sun 07 Sep 2025 07:01:21 +0000
Manifest next update: Mon 08 Sep 2025 07:01:21 +0000
Files and hashes: 1: SHLl9iwssTUg5fKe35HpNLXkByQ.crl (hash: PYbfwPDBJaqfJGiukj06yS8xpc0k/Js2AMFGiIpGIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHLl9iwssTUg5fKe35HpNLXkByQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ba:d9:52:74:01:22:e1:84:5a:ee:1d:b4:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4872e5f62c2cb13520e5f29edf91e934b5e40724
Validity
Not Before: Sep 7 07:01:21 2025 GMT
Not After : Sep 8 07:01:21 2025 GMT
Subject: CN=bbe8b75090fd8b757d9de6572a81fa6e1dd59ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:4c:25:5d:70:27:57:9b:c7:f4:32:b6:32:
96:1b:23:3d:a7:43:0d:b5:da:11:2e:e2:c9:7d:97:
9e:6a:87:58:ec:cd:77:8b:4e:9b:f5:a3:c2:4c:a2:
40:9c:56:ec:b5:9a:7a:1e:8f:9b:09:cf:77:15:e5:
7a:c3:f7:2b:ce:de:50:d0:cd:56:e3:cc:51:d6:92:
52:62:40:61:b4:f9:e2:36:cf:0f:d5:f0:07:68:0d:
0a:52:c1:c3:75:8e:a3:c4:d7:6f:5e:8c:bd:de:76:
80:22:1c:85:71:c4:a4:b6:5e:cb:72:c8:4e:a9:cc:
a1:44:ba:b8:e5:2e:83:4c:95:61:d9:f2:a3:90:8c:
36:6b:84:6b:5e:16:d2:ec:63:97:32:3e:a5:e9:c1:
2c:9f:92:88:e3:11:84:0e:15:2c:0a:d6:8c:96:8f:
3c:64:b2:ab:f0:1c:04:59:d1:a3:e5:87:ab:ae:05:
95:67:ea:9d:a1:71:38:45:58:76:75:e8:41:c2:00:
93:c4:9b:20:b4:81:4d:7d:cc:6c:a8:53:84:fc:e5:
4d:b8:e9:1c:cf:a0:cd:50:b0:1f:ca:e6:9f:d8:12:
fa:b8:04:d5:c9:aa:09:d3:0e:e5:22:61:5e:90:02:
88:b8:52:d4:5c:fe:89:f4:ca:e8:54:08:b6:96:6a:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:B7:50:90:FD:8B:75:7D:9D:E6:57:2A:81:FA:6E:1D:D5:9A:C9
X509v3 Authority Key Identifier:
keyid:48:72:E5:F6:2C:2C:B1:35:20:E5:F2:9E:DF:91:E9:34:B5:E4:07:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHLl9iwssTUg5fKe35HpNLXkByQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/adbbe4-769b-487f-9b83-d3e47c69569c/1/SHLl9iwssTUg5fKe35HpNLXkByQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6b:e8:cb:51:e3:4d:35:95:57:db:a1:9b:e2:15:43:e7:d1:
85:21:1a:a8:26:87:83:be:12:e2:7b:29:b8:9b:25:a4:6d:f5:
c9:6f:5e:3c:7e:d4:53:95:56:5f:f7:23:16:ca:2a:48:93:50:
fa:7d:35:53:00:75:ba:59:09:fe:4e:eb:ec:31:e9:12:84:34:
64:50:c0:dd:90:49:57:65:e4:b8:32:c1:f1:5e:ee:2d:69:2a:
3e:fb:66:5f:82:f1:10:d9:f2:e7:3b:22:1c:36:99:0a:9a:1a:
f0:54:5f:ae:e7:ee:eb:61:d7:d0:da:40:54:6b:b1:cf:23:43:
f4:d1:01:99:fd:cc:8d:8d:34:da:04:52:00:8d:4d:48:25:2a:
43:2f:d6:1f:04:58:b2:ef:54:e0:50:90:20:a5:a9:d5:80:9f:
05:03:54:a8:93:3f:8f:4f:52:99:9f:d4:97:63:71:1b:dd:1c:
46:4b:f1:b9:87:36:bf:03:f1:ec:21:a9:9b:2c:51:ea:16:4c:
c1:69:ce:da:c0:c7:88:8f:d8:0f:18:df:87:5d:7a:72:8e:35:
28:78:29:fa:aa:9d:d0:2f:7b:9b:03:69:da:fd:1d:3b:47:c7:
7f:45:b7:1b:26:6a:94:64:cc:86:95:62:dd:11:3f:47:04:55:
72:62:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:01 2025 by rpki-client