Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
File: pL9-XCjULmcUGeYsMmBJ5cedSOA.mft (raw, json)
Hash identifier: A3Fsj+JXN1foullOVVp/Z5AL9np1/mf+b0q9YALs2N0=
Subject key identifier: 00:6E:18:02:F1:10:A6:34:6A:71:87:17:97:29:D4:F5:E1:91:4C:DF
Authority key identifier: A4:BF:7E:5C:28:D4:2E:67:14:19:E6:2C:32:60:49:E5:C7:9D:48:E0
Certificate issuer: /CN=a4bf7e5c28d42e671419e62c326049e5c79d48e0
Certificate serial: 019882E761B5BC3F207F6FB2114FD3CCC99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
Manifest number: 27
Signing time: Thu 07 Aug 2025 05:00:58 +0000
Manifest this update: Thu 07 Aug 2025 05:00:58 +0000
Manifest next update: Fri 08 Aug 2025 05:00:58 +0000
Files and hashes: 1: pL9-XCjULmcUGeYsMmBJ5cedSOA.crl (hash: KhbHOM2UJ9BMob//C24aReP9+n1unheX8veCcR2qtpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:61:b5:bc:3f:20:7f:6f:b2:11:4f:d3:cc:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bf7e5c28d42e671419e62c326049e5c79d48e0
Validity
Not Before: Aug 7 05:00:58 2025 GMT
Not After : Aug 8 05:00:58 2025 GMT
Subject: CN=006e1802f110a6346a7187179729d4f5e1914cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:bb:a0:2c:15:56:de:3b:99:7e:ba:92:85:
8a:b8:58:b2:e1:83:f9:8d:72:b1:f5:42:ca:40:66:
6b:6c:ce:05:b2:86:e8:dc:94:c8:d2:e7:ed:2a:b8:
f7:f5:d0:2e:cf:94:89:6d:06:38:e0:de:0e:bf:13:
40:0b:0a:5f:b8:8e:de:e3:31:1c:ac:d3:1b:c0:43:
eb:2e:7b:f6:17:6e:e0:4c:20:68:d6:5c:a2:cb:77:
78:42:84:54:43:34:d7:58:61:11:3e:1e:d7:35:60:
fc:d6:22:ad:8c:06:3c:ce:be:ea:f7:1a:bf:33:a8:
1c:dc:60:34:3a:f5:48:6e:4a:ee:89:11:1d:96:a7:
f5:b9:f0:ec:13:b9:19:6b:3a:01:b9:8d:59:1e:fc:
c0:ea:a8:3f:d7:a0:16:be:e3:1a:f8:50:c8:88:58:
61:2c:8d:cf:0e:d1:db:da:d8:db:46:90:b8:b9:4b:
b9:f6:94:40:6f:f2:07:bf:e0:d9:42:fd:92:e9:ff:
34:cb:bb:1b:22:5c:db:8d:3b:18:01:63:f6:8a:39:
c9:a7:60:95:f4:fe:e3:6c:b4:19:0d:ce:39:79:38:
e9:9f:36:8b:26:5b:c5:d0:e3:c9:cc:ef:ed:c3:41:
1b:17:e2:22:ad:63:04:5f:50:e8:94:05:55:87:90:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:18:02:F1:10:A6:34:6A:71:87:17:97:29:D4:F5:E1:91:4C:DF
X509v3 Authority Key Identifier:
keyid:A4:BF:7E:5C:28:D4:2E:67:14:19:E6:2C:32:60:49:E5:C7:9D:48:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:5e:a0:0b:20:82:5a:75:d7:8e:8b:22:c9:48:de:94:6f:
06:ea:18:fe:7e:36:5b:26:05:db:c0:50:2a:a6:23:5c:5b:75:
2a:c9:b7:3f:ee:d5:52:5d:7e:8c:23:63:5c:c3:ee:26:b1:6b:
f8:98:d9:6e:b3:e6:13:00:3f:0f:fb:fd:ce:de:c6:cf:41:f5:
e8:54:7c:64:28:c6:79:50:46:60:cd:f6:27:d8:df:44:13:77:
95:14:56:65:28:5e:fc:98:ed:08:cc:7e:69:ff:50:1b:d4:09:
55:a8:14:f1:b3:45:92:71:f7:98:d3:2c:26:19:1f:27:bc:31:
5c:a7:41:b7:33:7d:a4:db:fa:4b:c3:38:dc:2f:47:3b:ce:99:
47:c7:fe:34:47:ae:fa:a7:4f:fa:d2:77:97:80:00:bb:e4:36:
99:bf:04:ce:2e:dc:21:d8:39:34:e6:89:93:43:70:e2:64:25:
a2:c0:42:92:f2:01:c2:0d:ee:ff:2d:07:99:78:f5:99:15:af:
3c:11:c9:6e:d5:e3:5f:a5:50:0f:81:75:8d:c6:fa:ad:be:34:
52:d8:12:e6:a3:f5:b0:85:c6:8d:94:6c:88:3f:1c:26:73:cc:
3b:f1:d7:df:de:f6:db:0f:2c:a4:7c:a6:dd:d0:54:7c:d1:d6:
07:70:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:04 2025 by rpki-client