Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: C4dXTNmhlcKgGLFBjfpn/rlk7aWDb75D8b+gfFzJ1k4=
Subject key identifier: F9:93:1B:D8:84:F9:BF:CF:28:D7:09:AD:23:93:E2:73:AB:25:BC:4D
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 01987B9CEF91EF1F9189989C2DC1912F6D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 19:02:19 +0000
Manifest this update: Tue 05 Aug 2025 19:02:19 +0000
Manifest next update: Wed 06 Aug 2025 19:02:19 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: 4UECOuzHThfhPtxAOskb/kC589MqJjdzTEEYfPX3suw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:ef:91:ef:1f:91:89:98:9c:2d:c1:91:2f:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Aug 5 19:02:19 2025 GMT
Not After : Aug 6 19:02:19 2025 GMT
Subject: CN=f9931bd884f9bfcf28d709ad2393e273ab25bc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:66:43:de:5a:dc:d3:59:5a:ae:da:b6:d9:
04:79:dd:0a:5f:39:e7:49:37:5a:3c:73:ad:21:a9:
62:03:a9:62:df:8f:fd:28:ac:97:97:d2:9d:20:b6:
96:4e:f8:e8:d1:16:13:07:00:f2:27:55:2c:71:f9:
de:a0:36:c5:cd:ec:43:7d:9c:d6:72:dd:b8:fe:02:
ff:ce:cd:a0:b1:e3:0d:a4:23:12:9a:37:c4:ae:54:
35:52:e6:82:23:ff:de:8a:51:d8:02:c4:e4:b7:af:
be:5b:de:6f:9b:be:68:79:a6:65:ca:7e:9a:c7:2c:
c7:70:58:a8:d2:40:60:68:9e:39:42:5f:51:23:21:
af:7b:13:1e:01:d2:37:41:fa:6a:83:2a:d3:9c:f2:
67:e0:ee:f9:98:36:c2:93:09:cf:0f:6b:99:2c:28:
4d:8a:98:ce:b9:62:1f:89:40:20:a9:36:d0:18:1b:
51:c3:ec:ce:ea:eb:fa:7e:56:c8:bd:51:ce:3c:d4:
1e:6e:0a:42:34:2a:68:61:5b:be:ab:48:cc:67:25:
b3:e8:be:91:9c:5a:1e:7e:cc:5f:6d:24:15:8f:6c:
2b:4e:a2:0f:28:83:0a:46:47:f8:99:1a:4e:88:24:
fc:1a:d0:07:a7:49:65:12:5e:5e:a6:6e:26:84:08:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:1B:D8:84:F9:BF:CF:28:D7:09:AD:23:93:E2:73:AB:25:BC:4D
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:28:a2:27:fa:e2:2e:e4:37:bc:2f:21:ee:e7:4c:6b:9e:
2c:5c:4a:42:d5:29:73:83:64:98:3d:75:29:16:3f:8c:90:af:
b5:dd:56:3b:13:3d:b2:8a:91:16:65:b2:60:c5:1d:87:bd:16:
d1:af:9a:1f:91:02:0d:08:f6:c7:94:c7:0e:13:98:06:be:2f:
d5:17:c0:48:63:32:ae:cd:37:bd:80:55:8b:57:d7:1e:0e:3e:
18:29:e0:ce:ca:bc:c0:b3:1f:b8:e5:ae:b5:9a:8c:00:70:06:
c6:00:3e:07:30:7d:86:3a:36:c9:de:2f:bc:ca:df:10:d5:30:
2d:b8:82:07:8c:f7:17:f0:b3:21:a4:b8:9b:90:9d:0e:25:99:
96:34:69:03:9f:cf:e0:ec:0d:bb:53:18:f7:54:f0:d1:54:0d:
37:c9:26:4f:8e:33:59:d8:e5:88:74:7e:a6:4f:bd:d4:5e:6c:
23:8f:b5:24:8e:32:b2:d4:20:be:25:72:9e:b5:e1:0a:c2:35:
f9:d3:c7:3b:e4:b6:f7:b8:fa:bc:29:c0:ba:66:67:3e:d8:46:
d0:b4:5d:bf:63:17:6e:ed:e9:35:90:7d:31:bc:a9:92:71:92:
1d:87:07:51:0b:83:40:72:ba:3b:21:dc:d1:26:4e:47:1f:fd:
fe:09:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:52 2025 by rpki-client