Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: YKDLvepfl/bV3EAVcBb6DO8r4wdnbAK5rY1uBwIcd4E=
Subject key identifier: AB:BF:81:F0:15:85:4B:E8:E7:2D:B3:96:2B:C3:00:61:75:CC:49:89
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 019893A3BA78A7D2E0636DA17EE3AD0ECBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 0144
Signing time: Sun 10 Aug 2025 11:00:37 +0000
Manifest this update: Sun 10 Aug 2025 11:00:37 +0000
Manifest next update: Mon 11 Aug 2025 11:00:37 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: IBJEQFNOcXZSxghX9Q80Hc02vZLHxRg3xmLToE3VOp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:ba:78:a7:d2:e0:63:6d:a1:7e:e3:ad:0e:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Aug 10 11:00:37 2025 GMT
Not After : Aug 11 11:00:37 2025 GMT
Subject: CN=abbf81f015854be8e72db3962bc3006175cc4989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:51:e7:7d:6d:e6:4b:f8:51:51:fe:61:0f:
9b:2b:cc:f5:e5:0d:8e:a4:d8:24:89:78:14:e6:9d:
af:45:7a:b2:eb:04:18:68:c1:95:0b:89:fa:a3:5c:
9e:83:72:ba:5b:98:f2:55:7b:b7:c1:a1:4c:a8:23:
e6:98:1e:d5:56:30:bc:69:09:29:ab:db:a9:dd:8b:
74:03:6d:1a:1d:eb:d4:03:22:08:d4:19:61:63:d3:
ed:e1:87:d9:96:a4:ca:f4:34:8e:37:0f:61:1b:aa:
cf:09:6a:0e:aa:41:98:4d:c5:92:05:ff:af:aa:8b:
6b:bb:f6:b5:9e:3d:c5:79:bd:7f:ef:7c:11:c9:05:
61:39:0b:58:ee:a5:35:ff:73:81:9d:70:f9:39:4f:
e9:b5:d6:f6:53:66:5a:c4:0f:b6:f8:d5:d0:5e:ce:
2d:98:c6:42:62:61:11:26:d0:19:71:68:f5:de:9b:
c4:72:cd:e4:23:ff:64:9f:99:ad:5b:6a:2d:b7:cd:
1b:b2:b6:20:a6:91:9c:64:f6:e5:cb:76:82:2a:45:
ee:37:91:0f:5d:a4:aa:e9:23:15:2b:74:e6:98:6e:
6d:e0:03:2e:bb:03:e1:af:30:bc:29:19:19:ab:a6:
50:24:e2:47:3d:3f:d1:89:0f:3f:9a:b7:c1:fd:92:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:81:F0:15:85:4B:E8:E7:2D:B3:96:2B:C3:00:61:75:CC:49:89
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:5f:fe:33:b0:e8:dc:f0:31:b1:c5:5a:1f:32:9c:9d:d2:
e6:85:1f:6c:92:ef:51:d9:0e:a4:bf:23:86:97:c1:7b:97:07:
c6:ae:37:28:56:42:e7:88:e3:a5:02:8a:f8:c7:f0:6d:f0:e3:
16:ff:1f:ff:29:f9:eb:07:f4:e1:37:2e:1f:b4:d6:ba:01:1d:
2f:f6:e2:c0:86:f8:be:58:a9:f9:95:9a:38:6f:a1:64:78:2f:
67:ab:7b:85:be:1e:31:f0:38:13:c8:d3:51:b1:76:9d:eb:49:
a7:5c:cf:82:5b:da:7c:7d:1b:f1:c8:94:87:ed:56:5b:8b:9f:
8e:5f:a3:c5:78:58:5c:67:cd:d6:79:92:89:fd:17:21:5d:d5:
d4:a1:44:a8:a7:5a:61:8a:37:1c:b6:f4:8c:6d:05:1b:73:eb:
7b:cc:e1:17:0d:2b:2d:5d:48:51:e1:54:de:6e:ef:e5:2e:1d:
9f:61:89:81:e8:83:86:d9:46:38:ac:2a:ed:3e:a5:0c:05:3d:
e2:3e:01:3d:6c:c8:db:66:2d:3f:ba:8f:f2:90:7d:e1:85:f6:
ab:a0:6b:b0:5a:75:6b:98:16:1d:b1:17:0c:d5:f3:79:10:59:
26:53:19:c4:2c:3c:ee:ce:ff:95:f4:a6:37:79:c8:cc:09:62:
e9:56:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:34 2025 by rpki-client