Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File: 9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier: Pokwlhq+oUtn9FDVgyIVzllVHO/dB4b2bHxeCK8QWiE=
Subject key identifier: FC:E0:A7:DF:30:0E:B4:AA:7B:EF:69:7E:8A:C2:5C:1F:78:A8:9A:6A
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer: /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial: 01988D6B94F018079A1EECA9F5E58A6B0864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number: 1391
Signing time: Sat 09 Aug 2025 06:01:34 +0000
Manifest this update: Sat 09 Aug 2025 06:01:34 +0000
Manifest next update: Sun 10 Aug 2025 06:01:34 +0000
Files and hashes: 1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: zDYyULQFfKYYCkPhaR7bYchQ21TKzTCxe5NOQ+U+ZhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:94:f0:18:07:9a:1e:ec:a9:f5:e5:8a:6b:08:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Validity
Not Before: Aug 9 06:01:34 2025 GMT
Not After : Aug 10 06:01:34 2025 GMT
Subject: CN=fce0a7df300eb4aa7bef697e8ac25c1f78a89a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:22:b5:0b:7f:ef:c1:cf:da:b4:3c:7d:01:
3b:51:d2:8e:5d:c0:50:36:8b:60:84:08:e3:80:00:
6d:18:5d:2a:de:17:99:34:db:65:aa:cf:5b:cd:79:
0e:bb:5c:26:a6:b3:6f:66:6c:26:74:00:a7:1d:78:
16:10:af:a0:19:1d:70:e4:94:4e:de:4d:ca:d8:d9:
e4:1f:c3:4a:f1:27:43:9f:a8:0f:f1:b4:cc:5d:93:
49:38:6a:2b:2e:00:70:4e:71:bb:d8:14:7a:1b:81:
6f:50:6d:f0:ee:ce:98:e4:7e:3e:3e:f8:d4:e8:8c:
e0:d1:29:82:ac:c2:6c:e8:6f:89:95:27:1f:64:a6:
f2:9a:f4:7c:7a:a3:1f:d2:cb:c5:ae:d6:d0:c0:35:
76:6e:4d:8e:34:b5:ce:3b:5c:61:b9:3f:13:41:e9:
a4:86:6f:87:9a:bc:6b:02:1a:ad:5c:1d:05:98:e5:
20:56:a2:d1:f3:2a:84:b9:93:e8:88:76:a4:37:03:
bc:61:60:a2:04:a4:54:0d:db:81:19:95:05:4a:a0:
db:38:77:23:49:8b:49:d2:08:2f:63:6b:45:bf:5a:
7b:4e:5b:ca:8f:87:d8:56:80:71:34:36:48:02:af:
cc:99:8d:1b:1a:00:83:93:1a:b1:51:18:f4:9d:2a:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:A7:DF:30:0E:B4:AA:7B:EF:69:7E:8A:C2:5C:1F:78:A8:9A:6A
X509v3 Authority Key Identifier:
keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3d:84:63:dd:c6:81:34:b4:b3:8d:98:60:7d:bb:f5:e4:bb:
69:69:7b:ad:9e:08:0a:9c:e8:2d:4b:cd:0e:15:05:5a:ef:bb:
08:eb:94:cb:04:db:0c:08:a7:d9:8b:3d:26:78:49:63:05:ce:
8a:14:5c:da:ad:73:e2:ef:f7:f8:33:6b:4b:33:b5:de:c0:37:
a8:a2:8b:38:b9:2c:87:7e:8d:50:c5:d6:7e:e3:bc:cc:cb:c1:
3b:b9:27:ab:c3:1b:82:0b:22:af:33:07:5f:c5:bf:6f:c2:c3:
eb:2f:05:b5:38:ee:ac:10:88:3f:1c:58:f2:c3:1d:fa:e1:41:
8d:09:8b:f8:d8:f9:20:a0:01:92:13:00:22:2c:31:88:cc:77:
95:7a:99:9f:2c:95:05:4b:13:00:0f:f5:12:9f:2e:3f:58:4f:
72:c4:1d:88:58:80:4f:f5:8d:5e:39:43:ef:c7:66:55:00:1d:
a5:52:1c:b5:c5:9c:39:e9:57:a3:fb:99:bc:89:04:f3:56:f4:
71:40:d1:0b:0b:e1:e5:bf:63:d9:95:b6:0b:3e:b0:50:2a:4e:
48:e1:8d:aa:a8:a1:bd:b8:d4:2b:df:05:1d:82:e0:58:51:e1:
e6:3d:81:31:0f:2f:ca:d8:d5:89:b8:a5:0a:60:f1:6f:10:b3:
23:54:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:12 2025 by rpki-client