Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: KZb8hwXojerDP3PTjGvyfP7fgJwGU4Rf23GTw2UZALI=
Subject key identifier: 41:3C:23:F1:FC:12:20:6F:88:0F:94:E5:5E:DB:75:2F:BD:28:97:BF
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 019873E3D96C2AEB30EF5887B7782134302D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 0346
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: 7FU/xsaTnvbAcnNkSsLI16j6HjMzEl9mAvaSZo7aRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d9:6c:2a:eb:30:ef:58:87:b7:78:21:34:30:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=413c23f1fc12206f880f94e55edb752fbd2897bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:4e:16:94:ab:fb:b7:e1:38:05:2e:8b:a5:
97:4d:dc:47:bc:1a:03:c6:92:48:a5:c4:84:a4:8a:
7c:d3:c8:aa:99:3d:fe:c7:fe:f0:b9:49:90:5a:d3:
15:c8:17:43:01:3f:6b:f6:b0:39:63:27:c5:ed:cd:
5f:6a:24:a9:dc:b2:2c:6d:7c:1b:2e:69:ca:82:cf:
58:c0:c9:41:38:93:ad:49:a9:72:c7:3e:0d:40:cb:
0f:94:07:06:53:6a:a4:db:57:79:d0:7e:c4:dc:b8:
de:47:83:13:f2:9f:1e:0c:89:69:a8:ea:7f:7a:37:
b6:99:31:15:fd:e0:08:53:2a:16:93:e0:40:0e:a0:
1c:20:be:50:1e:1f:7d:c5:5a:2d:32:43:d4:b3:4c:
2f:43:c4:6d:ed:83:1f:c7:92:e9:ff:5f:15:72:a9:
7e:7d:e5:e3:b8:2e:c0:94:85:26:42:a5:1d:af:50:
13:65:9f:cb:d2:34:a8:92:31:aa:b4:13:eb:94:9d:
00:1d:64:55:5c:90:7e:0f:ee:39:40:60:89:51:1f:
10:3e:be:86:e3:c1:86:06:f6:b5:63:a6:e2:cb:44:
8c:c8:87:5e:6d:3e:4d:b5:b2:cc:29:02:a5:f7:75:
b5:e8:8f:e6:66:3f:2e:63:3d:32:70:1e:74:58:ef:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:23:F1:FC:12:20:6F:88:0F:94:E5:5E:DB:75:2F:BD:28:97:BF
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1e:2c:5c:ba:75:80:5f:0f:b0:a6:a3:2a:e4:14:ee:da:da:
96:00:fa:9f:9c:32:39:c9:05:fd:09:e0:d5:2b:26:53:ee:39:
6e:d4:5f:ed:33:78:14:04:e7:18:db:47:b2:f4:af:b3:73:16:
f4:2f:82:eb:f8:d5:fb:2a:b1:fc:c2:9d:36:7d:47:9a:7f:d6:
c5:80:0c:dc:44:36:24:40:6d:71:5f:dc:44:70:f8:4b:b6:66:
e9:f9:06:3c:bd:7f:60:f8:e0:b8:de:17:18:9b:68:6a:f5:57:
28:d8:a2:d8:60:4c:df:33:ff:7c:9d:5c:ac:4e:f2:6e:7a:fe:
1f:12:a7:90:c8:81:d2:21:b9:dd:22:c6:fd:62:bb:ea:a2:90:
1c:39:e4:95:56:10:a3:b8:5a:c9:be:43:4b:75:c5:54:21:54:
60:57:c8:9a:46:5c:b7:42:dd:e1:c5:99:1e:c2:db:05:6a:9e:
b7:a0:99:45:c2:c9:ce:f7:6e:3f:f1:19:1b:35:87:57:cb:4b:
10:6d:c6:89:df:ce:59:97:e8:aa:d2:9d:13:03:21:a1:5c:3b:
a9:f1:96:d0:91:04:d1:93:de:ac:34:b5:f4:11:4c:69:b0:36:
d9:3d:12:b5:a4:b3:49:6f:bb:cf:54:10:6f:fb:ce:f3:81:71:
9a:3f:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:24 2025 by rpki-client