Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier: qnklqBHoYiw+D8Onna3baXtgc3VrPbSoNF/y4bw/ThE=
Subject key identifier: 47:34:76:3C:CB:22:85:FA:8C:0C:8B:4E:20:FE:D2:D5:12:D9:A4:54
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial: 01988FC73932E0B1224DE4673F49ED522ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number: 07D0
Signing time: Sat 09 Aug 2025 17:00:54 +0000
Manifest this update: Sat 09 Aug 2025 17:00:54 +0000
Manifest next update: Sun 10 Aug 2025 17:00:54 +0000
Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: oBbHPLzBrl1l7nXoFcWVAmq/kuqbAN7Em46VKUcbvWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:39:32:e0:b1:22:4d:e4:67:3f:49:ed:52:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Validity
Not Before: Aug 9 17:00:54 2025 GMT
Not After : Aug 10 17:00:54 2025 GMT
Subject: CN=4734763ccb2285fa8c0c8b4e20fed2d512d9a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:df:6c:ef:1d:30:73:0c:31:00:d6:ea:52:
05:1b:e6:22:7b:82:de:81:48:cd:0f:aa:e9:65:a4:
ce:24:3b:4f:28:37:a5:a2:f8:33:ee:52:2e:2b:97:
29:bd:d3:84:18:3c:60:dd:e2:34:96:c9:ca:21:2b:
55:2e:50:37:67:10:57:af:71:b0:d6:d6:2b:31:f9:
93:e9:9d:77:e3:5b:ba:c9:81:55:40:27:5f:b9:9e:
e0:d7:23:96:25:d6:c6:6a:b9:11:70:4d:e2:01:17:
68:61:2e:c1:bb:63:f0:9c:df:cb:a9:2c:8d:cb:94:
85:b6:c4:1d:9a:45:ef:db:98:cc:b8:5b:94:63:5f:
aa:d6:cd:ad:40:1e:bf:19:f6:db:97:34:78:5e:f2:
ef:c4:88:af:4a:22:cb:e1:72:18:1f:f2:a2:31:3a:
57:e9:bd:a4:03:f8:f5:ea:46:c0:e4:e5:21:2e:8b:
d2:14:11:7b:bd:38:58:f8:87:5b:82:23:7b:3f:30:
7e:bb:e6:f2:79:1b:09:4a:79:f3:3a:71:c6:ef:b3:
01:ba:27:f2:14:48:de:60:48:13:3e:90:55:43:62:
f4:f3:a4:76:6c:fd:9e:8e:a0:96:12:8c:21:a7:b4:
2d:d7:33:ee:fa:97:3d:0a:a8:21:f7:14:b9:93:ec:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:76:3C:CB:22:85:FA:8C:0C:8B:4E:20:FE:D2:D5:12:D9:A4:54
X509v3 Authority Key Identifier:
keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:bb:e6:38:59:3a:d3:f1:8a:73:29:fd:cb:5f:b8:2f:64:
c1:c7:35:3a:e1:48:40:e1:03:d2:7c:75:84:32:0a:10:74:5d:
72:35:90:e7:e6:fd:95:20:c1:0a:4a:ba:ad:d7:68:9f:e9:d0:
94:0f:90:ba:0c:38:90:e1:a6:f2:d8:67:d5:ae:7a:2c:32:5a:
1c:d5:a9:0a:cf:34:bf:09:38:76:7f:e4:30:26:81:41:ef:ea:
97:49:1f:c2:35:87:0a:08:f9:97:e8:9e:37:ed:d6:6b:a5:ec:
09:95:47:55:a6:25:52:8e:42:34:6d:e4:a5:b8:21:0d:29:cd:
f4:b9:74:34:60:ce:7a:18:cb:83:8f:13:bc:09:b9:05:65:df:
04:96:be:75:c1:8c:51:ee:08:97:f5:af:4e:62:eb:9a:c1:41:
81:b3:fd:83:5c:fe:30:9a:91:53:0c:77:65:58:2b:bc:6f:56:
cd:49:7a:4e:54:f5:0c:07:98:a7:3c:68:42:40:ae:9e:1c:42:
cd:90:4d:df:49:47:50:59:0b:e6:cf:a2:fa:58:df:c1:a0:45:
3d:ae:0f:ad:7c:94:d0:ba:47:6b:85:35:c3:d3:08:fe:12:c9:
bb:6d:8d:31:1a:8f:bc:c0:5a:7c:a6:b7:5e:a3:27:36:8e:1c:
d6:be:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:52:24 2025 by rpki-client