Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: MdXUUWfkkg4Olp6a0pbE/7DwezakRcmHBrcOvUlq3gk=
Subject key identifier: 1A:BF:E7:5F:90:AD:33:78:24:37:11:7C:15:2D:EC:7D:B5:84:D8:7F
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 019921B1C00015073745AF05A08C6327E302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:00 +0000
Manifest this update: Sun 07 Sep 2025 01:02:00 +0000
Manifest next update: Mon 08 Sep 2025 01:02:00 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: xe1dOveB7Y8Bz7nAobV0yZeHC1Euqu70n2G+VMIYF8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c0:00:15:07:37:45:af:05:a0:8c:63:27:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Sep 7 01:02:00 2025 GMT
Not After : Sep 8 01:02:00 2025 GMT
Subject: CN=1abfe75f90ad33782437117c152dec7db584d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:36:10:1b:7b:24:ba:e2:47:59:7e:5d:70:
17:d9:6d:58:05:3d:7c:a1:c0:65:0d:e6:5d:c9:1d:
29:12:7c:03:4a:4a:51:2b:7b:51:71:3f:44:94:1f:
cf:22:e6:91:f6:cd:79:49:0f:8d:86:ec:97:25:7b:
60:94:e5:8e:a0:cd:4a:7c:79:c6:21:c5:26:3c:8b:
96:18:b2:04:81:b6:cf:e8:0b:81:dd:bc:d5:c4:8a:
64:11:7f:c8:35:aa:94:74:d5:6e:fa:9f:b1:5f:66:
7d:11:82:91:b5:22:7d:3c:c0:6b:f4:d1:02:0b:7c:
69:56:5d:2c:0c:a0:eb:83:0d:a4:dd:df:b2:74:57:
87:93:38:78:a6:54:52:ea:29:8d:32:86:e1:ff:fc:
b8:f5:8b:65:c8:9a:2f:fa:63:3e:66:b3:60:7f:63:
10:77:25:b7:33:f5:e9:7f:4d:32:b8:c1:70:42:d4:
32:8b:6e:61:23:ce:23:8f:94:92:83:c1:82:bc:b4:
d9:e1:e3:a7:dc:c7:2a:72:db:45:3a:51:40:b4:60:
8f:df:0e:1a:e8:15:eb:42:2e:00:f2:2f:ef:3b:78:
fd:05:89:90:80:2b:a4:b9:ff:08:68:25:a9:72:f7:
61:e9:cd:ad:b1:58:65:f8:dd:c7:eb:3e:64:18:f4:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:E7:5F:90:AD:33:78:24:37:11:7C:15:2D:EC:7D:B5:84:D8:7F
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:35:ba:18:ca:53:4d:8b:b0:f1:ab:4d:f4:b0:11:b4:fb:cd:
c8:7b:a6:f1:6b:4e:6b:38:b6:de:c6:2c:24:ea:99:7e:b7:63:
89:3e:a6:d8:48:27:01:7b:3b:37:f6:47:80:0c:46:54:59:3e:
fd:ce:28:f4:bd:4d:45:fb:ba:19:2e:43:26:0d:ce:cd:e1:c5:
33:26:58:96:da:1b:83:a0:de:63:65:45:82:4c:64:a7:ec:89:
3a:a6:e6:e0:56:a6:e2:9f:64:2c:97:17:8e:09:cd:fb:03:13:
4d:fa:ef:62:b6:af:f8:c9:a7:fe:14:3c:64:c5:48:26:96:1c:
78:8e:55:3c:dd:11:be:24:a2:7f:b6:5a:3e:65:d6:8e:ca:6e:
4c:c2:ab:68:76:73:18:6c:ab:07:02:bd:e2:ee:62:25:16:59:
6e:1e:ea:24:eb:8d:4f:db:6e:8a:af:e3:ee:c5:0b:3f:67:37:
35:65:0e:8a:71:57:61:42:2b:e4:38:d9:7d:e7:29:02:3c:c2:
77:80:23:c9:af:8e:62:4f:63:b6:ef:49:be:51:46:3e:6b:6a:
fd:19:3d:08:a4:34:66:5b:b8:68:c2:3e:c7:c3:f8:7f:f8:84:
62:3a:0b:e1:17:45:b1:6f:35:e3:0f:a3:33:8a:67:ab:a0:94:
53:d3:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:31 2025 by rpki-client