Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: A/6iRVye7kxq/4yRCEOC9ZFNH0Rk9gLBw0MYPGu4cIU=
Subject key identifier: 13:F1:A2:C8:E8:92:EB:6F:A5:FC:31:ED:DC:D0:3D:31:5A:23:88:57
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01988FC72610214F294DC6387A86B1C23383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 1325
Signing time: Sat 09 Aug 2025 17:00:49 +0000
Manifest this update: Sat 09 Aug 2025 17:00:49 +0000
Manifest next update: Sun 10 Aug 2025 17:00:49 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: GPLV10ZIQtzfuWq4NQ180hkP4RLP6Q3MmJorns156K0=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:26:10:21:4f:29:4d:c6:38:7a:86:b1:c2:33:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Aug 9 17:00:49 2025 GMT
Not After : Aug 10 17:00:49 2025 GMT
Subject: CN=13f1a2c8e892eb6fa5fc31eddcd03d315a238857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:2e:7c:32:b9:b4:5d:66:8c:45:33:80:4a:
bb:67:9d:0e:e3:34:84:62:45:81:10:be:82:2c:71:
93:b0:7c:4e:1e:e4:7b:b9:64:32:9e:da:22:97:3b:
ef:f2:35:e1:52:34:c3:b2:79:bc:28:65:7a:fd:c6:
26:b3:eb:6a:48:75:fd:ea:ae:6f:a0:e4:cd:96:f2:
20:e8:b0:47:eb:81:e2:cd:bb:84:58:fa:72:c6:3f:
c0:a3:c5:3d:9b:f7:0e:ad:9d:7b:eb:8d:8c:0e:b3:
f2:78:f5:7e:80:ef:4c:82:4a:c4:11:0b:a6:a2:c6:
59:05:1f:4b:cc:8f:21:bc:a0:91:28:1e:a8:bb:88:
75:4b:fc:83:68:f6:1c:c2:20:c3:5d:c6:e7:2a:d4:
44:fb:c6:c4:1d:a4:45:14:2f:c5:04:a3:99:a6:a7:
fd:8c:1c:af:01:71:90:ff:c3:95:a2:bf:b9:90:90:
82:69:32:e9:5f:68:5a:97:6f:52:ea:02:cd:06:e6:
9e:4c:3d:f0:14:20:9e:c3:67:50:3d:36:67:dd:db:
b1:d4:0a:7c:d1:16:8f:16:d3:35:5b:9c:e1:13:d1:
ee:8d:c5:8d:b9:99:a3:04:9c:bd:0d:f2:58:fe:b2:
ea:45:2b:e3:f4:11:89:03:af:9a:e0:75:75:1a:4b:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:A2:C8:E8:92:EB:6F:A5:FC:31:ED:DC:D0:3D:31:5A:23:88:57
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e2:ca:e7:68:e8:60:d5:f0:ed:27:08:1b:05:b4:31:7b:c6:
d0:f3:06:ae:24:9d:49:b1:67:71:0d:1c:78:9e:02:b8:71:6c:
00:02:89:55:ce:b1:da:0c:66:50:14:fb:35:60:36:63:f8:0f:
49:dc:bd:4b:6d:e8:d4:06:7d:a1:cf:8c:76:97:69:e8:41:7b:
f6:c9:b8:f5:57:f7:ac:cd:c2:89:9d:14:d0:f6:55:9f:1f:8f:
f3:a1:9b:16:76:4e:57:3c:c5:0e:e6:e2:12:c4:53:a0:97:64:
3d:35:fe:f1:ea:36:ed:01:d2:c3:a2:32:db:82:7e:df:3a:2c:
11:e0:14:a3:4b:5f:3e:9c:c8:8c:f1:31:ed:c5:8f:ad:56:02:
0c:65:cd:d9:93:d3:f3:27:76:04:f9:59:3e:0e:c1:84:a0:84:
57:e9:95:69:7a:bb:ad:e8:96:60:a8:f6:3a:63:9d:b2:c1:5a:
f3:78:2a:8a:fc:75:d3:ad:a0:7f:25:ef:49:e7:1c:5f:2f:84:
5c:ca:4e:ea:35:9a:74:a6:a2:02:61:6e:04:ac:ea:6e:39:44:
4d:a8:d3:11:e1:f3:08:c9:12:64:f9:51:ed:37:4e:25:7a:d3:
61:bf:e5:fe:cf:33:a3:32:f8:df:3f:85:53:90:f7:e6:40:d5:
15:19:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:37 2025 by rpki-client