Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: Bi9QO+KhwJ0z+pHNZCBqYQwR5/2i+AR/YfyZ72F1ZUI=
Subject key identifier: 1C:FB:F2:1A:10:AF:B3:B2:6D:51:97:3F:89:6F:D1:0E:08:EC:F1:5F
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 0199228D237E9B8E71E68D2F3864163AA27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 14BE
Signing time: Sun 07 Sep 2025 05:01:38 +0000
Manifest this update: Sun 07 Sep 2025 05:01:38 +0000
Manifest next update: Mon 08 Sep 2025 05:01:38 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: dH05DdUC8aNuW1Xtkso+yvdEPl1ruZ8xt+dfxlnk7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:23:7e:9b:8e:71:e6:8d:2f:38:64:16:3a:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Sep 7 05:01:38 2025 GMT
Not After : Sep 8 05:01:38 2025 GMT
Subject: CN=1cfbf21a10afb3b26d51973f896fd10e08ecf15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:00:98:9a:1c:e6:33:91:dd:e4:cd:cf:32:
6d:72:6c:00:26:4d:80:53:6b:61:84:cc:e2:51:ae:
4d:69:8f:06:14:da:db:cc:19:d2:7e:1c:d7:16:3b:
53:77:0e:7e:97:ad:3f:28:18:97:7c:01:eb:be:59:
97:25:8b:73:83:c3:9c:c5:6f:27:43:b7:2e:e7:ec:
fd:0a:e8:5a:24:bd:40:60:57:94:57:17:4c:05:a6:
c6:22:2e:d0:f0:d8:c3:37:e5:00:08:f8:48:c1:56:
c5:f5:8b:6d:21:89:17:ac:37:fc:72:82:0c:ca:a5:
81:54:9b:78:d7:d3:ec:d5:79:4d:85:e4:4b:bc:2f:
05:d4:28:0e:cc:7f:86:8d:0c:8e:b8:6d:db:2c:a7:
74:7e:32:53:61:d3:48:f8:13:e2:e1:f3:5d:46:a9:
b9:10:b4:7f:91:a1:be:99:78:29:4d:ef:5f:3d:43:
8d:fb:dc:3b:99:08:42:f3:76:76:75:4a:74:8a:75:
83:09:95:f5:92:f7:81:6a:38:42:f5:e8:2d:51:fe:
91:2b:68:8c:69:e7:d2:35:3c:09:77:d6:5c:39:23:
0a:cf:79:cc:20:71:21:02:18:05:b1:c6:3e:a3:f6:
df:49:05:c7:4e:49:5a:4d:d6:e4:1d:89:68:e1:81:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:F2:1A:10:AF:B3:B2:6D:51:97:3F:89:6F:D1:0E:08:EC:F1:5F
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:f1:6d:02:fe:fb:f3:74:2d:a3:7e:7e:dc:fa:0d:3e:03:
a6:45:2b:2f:99:bf:0a:21:e6:e4:bb:56:ae:74:3f:9f:c1:7a:
a3:d8:74:c3:1b:41:f3:c3:fd:ff:24:85:6e:2b:07:4b:4e:6c:
30:6e:61:41:a3:83:0c:bc:16:5a:a3:85:c4:3a:91:10:50:ec:
ac:3e:eb:21:30:ba:de:76:e4:ed:22:5c:aa:d7:4e:1d:56:b3:
0c:88:95:f7:ee:03:f8:b3:f7:6b:eb:0d:92:be:8e:a5:bb:57:
0e:98:4b:36:9d:91:7f:03:6f:b0:bd:30:8f:c1:c1:ee:08:66:
70:03:fc:3a:23:b3:2e:b7:33:f4:a5:9c:f5:d5:d1:e2:51:b1:
9e:c9:f7:a2:51:c5:15:02:33:9e:82:17:be:a6:0d:d7:18:7a:
99:9d:2e:b1:58:23:c3:fc:77:74:e4:6d:b0:d9:8a:31:7f:0f:
b3:82:5c:52:f9:28:c4:89:71:3b:49:8c:7b:43:8d:f4:02:7b:
08:7f:af:16:19:72:10:85:1d:f8:ff:23:43:b0:e4:f0:25:0d:
f6:b2:f5:6d:29:64:02:11:16:f0:0c:5c:41:73:e8:14:5d:bd:
ee:b2:b2:41:da:fc:2a:2d:72:ac:1e:21:c4:ff:15:b8:3a:7d:
43:a4:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client