Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
File: rl8yMzCqPoI4TGOgFadR5U7chVI.mft (raw, json)
Hash identifier: StjP7TmIT3lB6CI65A5Lk2hK2ShOaCniD9qN6ODVyfA=
Subject key identifier: 74:14:06:0B:85:BD:2F:46:E4:CC:5E:1B:0F:16:08:AE:66:59:7F:57
Authority key identifier: AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
Certificate issuer: /CN=ae5f323330aa3e82384c63a015a751e54edc8552
Certificate serial: 0199239F119BE8086D11AB2DE0A65B4099D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
Manifest number: 56
Signing time: Sun 07 Sep 2025 10:00:51 +0000
Manifest this update: Sun 07 Sep 2025 10:00:51 +0000
Manifest next update: Mon 08 Sep 2025 10:00:51 +0000
Files and hashes: 1: rl8yMzCqPoI4TGOgFadR5U7chVI.crl (hash: flDSEHW/oIXHcJZYwsGbVz6QHrS6wRnEPdwNtZFwjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:11:9b:e8:08:6d:11:ab:2d:e0:a6:5b:40:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f323330aa3e82384c63a015a751e54edc8552
Validity
Not Before: Sep 7 10:00:51 2025 GMT
Not After : Sep 8 10:00:51 2025 GMT
Subject: CN=7414060b85bd2f46e4cc5e1b0f1608ae66597f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:eb:98:6f:95:27:dd:33:72:2b:83:66:a9:
6c:35:e7:32:9c:94:c4:29:69:1e:58:21:59:5a:69:
74:3b:c4:71:b6:e0:69:87:01:12:60:bd:aa:5f:11:
e7:4d:ca:1e:06:51:ae:22:75:9f:2b:79:86:3e:bf:
99:71:0d:90:d2:5f:da:27:6d:42:5b:79:57:a4:c1:
4f:00:59:11:82:95:a4:c0:6f:6b:37:8d:6d:de:b4:
4d:73:3e:3d:60:c1:c3:11:24:dc:d7:81:65:9b:14:
e5:26:ce:42:55:b1:47:33:55:b6:6b:d9:e3:13:2e:
09:02:bc:cd:d1:75:f4:b8:81:63:cb:d5:96:07:fd:
4b:5e:56:c7:b3:70:99:0f:59:ed:4c:dd:55:79:76:
a9:69:41:4c:3f:50:0a:ca:6d:9e:2d:8f:be:b6:27:
a1:4f:c4:cb:88:5c:2c:d4:7c:10:74:2f:c4:bb:99:
6e:53:52:61:3d:09:75:66:e7:90:94:7c:cc:b6:52:
73:d1:93:dc:f2:e9:e0:3c:63:fd:81:bc:d5:bf:24:
97:da:b4:1c:5c:d6:37:4e:7f:99:b4:29:11:f4:9d:
c4:72:65:11:65:cd:5b:84:5b:19:33:de:3e:f6:dd:
5c:77:15:01:27:ba:78:68:8f:16:73:92:3f:c1:c6:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:06:0B:85:BD:2F:46:E4:CC:5E:1B:0F:16:08:AE:66:59:7F:57
X509v3 Authority Key Identifier:
keyid:AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:37:5b:df:7c:d5:37:2f:b1:97:52:06:9c:78:62:b5:90:
5f:ce:94:0b:e3:4e:85:46:e2:1b:48:ee:f3:cd:16:06:36:b0:
20:1e:36:4d:08:9f:88:39:53:dd:36:72:bc:5b:b6:b7:4c:71:
d5:44:8b:40:07:c6:45:00:be:f3:4d:a7:28:eb:c2:88:2b:18:
87:1c:e1:16:c1:1f:d6:dd:09:a3:ba:f3:0b:ed:49:d9:a5:bb:
06:06:e8:bf:3f:d8:21:83:a7:ba:22:4d:e4:9c:2f:cc:04:0e:
6f:30:2a:f7:8f:38:b0:55:50:f5:70:b5:e6:c3:84:f7:57:03:
a9:3e:bc:81:ec:3f:ca:01:d2:40:09:b2:c2:92:d9:58:e9:34:
b9:71:52:fb:b7:f5:1b:64:1f:ac:2b:23:ab:db:21:4b:43:62:
ae:7c:82:91:43:79:17:4b:65:5f:b3:77:07:05:18:16:b1:9c:
56:b2:34:0b:fa:44:d0:71:04:bb:be:37:71:b5:34:fc:6f:fd:
24:0e:54:2d:3a:38:79:ac:d1:fd:6d:71:c6:3d:b1:9d:f7:c7:
1c:c7:f9:27:b3:2b:83:d1:fd:3b:a3:27:82:e7:48:3a:89:46:
6d:9b:f4:05:c1:9d:b4:9b:2b:a5:a1:8f:44:fe:1f:1a:2b:ba:
2c:8f:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:18 2025 by rpki-client