Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: l0BRucLuH35+Xr9qeCZzCXrSsgZa9CQd55U0+RbdFYM=
Subject key identifier: 82:DD:02:65:95:D3:D0:71:BF:C7:44:2D:09:BA:96:99:21:BC:9F:1A
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 01988BB3BD948A2A00D5B6220CEB0B2DC4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 10F5
Signing time: Fri 08 Aug 2025 22:01:09 +0000
Manifest this update: Fri 08 Aug 2025 22:01:09 +0000
Manifest next update: Sat 09 Aug 2025 22:01:09 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: L87a6QPUbP2rJxExwfxRRbh5E82Jp1hy0Et4lzNUJmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:bd:94:8a:2a:00:d5:b6:22:0c:eb:0b:2d:c4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Aug 8 22:01:09 2025 GMT
Not After : Aug 9 22:01:09 2025 GMT
Subject: CN=82dd026595d3d071bfc7442d09ba969921bc9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:d0:05:ef:45:e5:3f:58:04:bf:29:17:cc:
00:eb:12:e9:0a:d5:6c:27:b2:20:e6:b8:93:a9:d8:
c8:88:67:56:30:ad:77:36:c8:02:9b:6f:82:b9:f9:
b6:4b:8f:d5:68:7b:c2:f1:49:0f:1d:9e:78:66:6a:
68:6b:bb:42:3d:b8:e6:d2:47:fb:58:42:b3:10:50:
27:b0:8a:70:11:30:fb:4f:69:0f:52:07:33:18:9a:
e9:fd:a9:b3:ff:1e:07:c0:4c:46:c5:79:e9:01:e2:
5d:cf:cb:8f:ee:29:8f:bb:a2:15:8f:19:69:e6:e7:
b8:d3:4c:ab:d8:47:31:a3:0b:1c:f1:d7:2d:bf:13:
80:c6:38:b4:d2:35:37:6e:f5:ed:06:94:67:95:79:
80:e4:4d:95:df:dc:4a:11:1d:45:ea:44:60:64:bd:
a2:a7:5a:63:5a:a1:38:34:fc:0e:b1:14:d8:b2:30:
21:4a:28:e7:65:a0:fd:d8:c6:43:c2:19:bc:ea:f6:
b0:6c:c1:10:4a:37:de:af:0e:6d:c9:7a:10:fb:58:
d9:61:32:c2:af:c7:c7:19:ff:4f:c3:0a:5f:1e:f6:
a9:dc:49:ec:73:3c:66:2b:96:4e:13:0f:9d:75:30:
53:fb:67:5b:4f:5e:e4:c8:54:22:7e:98:0e:5e:3b:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:02:65:95:D3:D0:71:BF:C7:44:2D:09:BA:96:99:21:BC:9F:1A
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:82:4d:9b:e8:8e:f1:34:96:72:77:e4:e7:a2:1e:81:90:
71:7d:9b:e8:c5:b8:7a:65:6f:0b:a3:a3:22:b3:18:c9:fe:e5:
03:a8:da:fe:ac:7b:da:7e:14:b1:a0:28:50:db:cb:24:91:f9:
10:46:87:7a:f2:01:9f:f7:f9:4b:76:c5:cc:b6:e7:7a:36:57:
16:10:e7:19:50:6d:98:fb:01:1c:1b:ab:b7:60:25:21:8f:6f:
1e:78:a4:ab:cf:67:29:16:16:1f:4e:5e:e7:15:e0:e7:ed:9c:
c6:05:0a:11:c6:b1:9e:e7:3c:a5:ce:61:38:1e:49:d1:11:6a:
fb:1d:77:81:69:a8:a6:03:bb:c4:9f:89:15:b6:06:bf:87:5d:
5e:da:73:2f:c8:39:6b:a3:a6:f0:c9:16:07:5a:d0:0b:8c:5b:
12:03:74:40:2a:8e:b7:4b:5b:f6:50:9d:44:f6:b9:9e:99:fa:
39:3e:1f:49:cd:b5:0a:2c:ca:96:82:c3:7c:5f:93:71:f1:02:
cd:4a:12:ab:f5:4a:b1:c8:32:1b:9d:ee:11:7a:7c:92:12:33:
27:01:9a:ff:5f:40:6d:5e:6e:58:0b:a3:87:45:f6:50:85:04:
a4:f4:98:08:f6:42:11:6d:40:18:9a:1a:3c:67:ce:80:80:40:
6e:c0:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:14 2025 by rpki-client