Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.mft
File: RLFLGzBp9QxuJciiSvxhcR1ZhYM.mft (raw, json)
Hash identifier: 5REI9S6/numPGdiY7gZz/HnGyz6diwAIGvWmiYBKS2M=
Subject key identifier: CE:B5:FE:28:16:CD:1F:B5:5E:D0:66:F2:F6:8E:2E:5A:A2:59:BA:DF
Authority key identifier: 44:B1:4B:1B:30:69:F5:0C:6E:25:C8:A2:4A:FC:61:71:1D:59:85:83
Certificate issuer: /CN=44b14b1b3069f50c6e25c8a24afc61711d598583
Certificate serial: 01987C0A63AC3A07172CC60E30E403DDCC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFLGzBp9QxuJciiSvxhcR1ZhYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.mft
Manifest number: DA
Signing time: Tue 05 Aug 2025 21:01:52 +0000
Manifest this update: Tue 05 Aug 2025 21:01:52 +0000
Manifest next update: Wed 06 Aug 2025 21:01:52 +0000
Files and hashes: 1: RLFLGzBp9QxuJciiSvxhcR1ZhYM.crl (hash: 0VK79pKBaKaQehRmbSo8zzn25FEe0l/gdzp/mTnEw3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFLGzBp9QxuJciiSvxhcR1ZhYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:63:ac:3a:07:17:2c:c6:0e:30:e4:03:dd:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b14b1b3069f50c6e25c8a24afc61711d598583
Validity
Not Before: Aug 5 21:01:52 2025 GMT
Not After : Aug 6 21:01:52 2025 GMT
Subject: CN=ceb5fe2816cd1fb55ed066f2f68e2e5aa259badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:f9:1a:74:87:3e:5c:7c:77:ec:91:c4:42:
ef:62:22:b0:0d:e3:91:ec:f5:68:81:15:a0:97:99:
8e:87:ca:1c:a7:a2:2e:c4:fc:61:06:3a:84:37:31:
92:a7:8e:55:f9:58:a1:9a:51:be:f4:b7:2a:1e:fa:
2c:af:3d:db:d7:73:c2:1a:31:53:54:17:6f:26:0f:
dc:e4:cb:25:cf:bb:2c:1f:e7:d8:4c:6d:f4:71:02:
63:53:c0:10:58:bf:c5:f6:79:ba:d2:06:f0:27:4d:
eb:3a:ee:74:41:dd:e1:3d:e5:5e:97:13:23:44:b8:
0e:62:e1:84:6d:42:30:f3:1f:e4:bd:d8:06:5f:db:
55:57:7e:e2:d2:c4:6d:bc:d6:5d:51:49:d5:7a:61:
25:e0:96:5a:66:3f:b2:82:80:b5:d8:16:f4:82:a0:
eb:b6:b3:4e:32:50:96:fd:94:c1:4b:5f:91:bf:85:
88:84:85:e7:16:1b:44:21:d1:7b:f5:ce:58:6b:ee:
f3:d3:28:4a:7e:67:d6:45:8c:43:b4:c4:9a:86:85:
5b:65:1a:e4:d8:48:b5:a9:c7:f8:83:a9:0b:b0:ec:
a4:8a:ab:3f:06:da:2d:0e:7c:fd:e1:f6:39:43:71:
b2:8b:ad:08:c7:3a:c9:76:24:ec:c2:4f:3d:9d:35:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:FE:28:16:CD:1F:B5:5E:D0:66:F2:F6:8E:2E:5A:A2:59:BA:DF
X509v3 Authority Key Identifier:
keyid:44:B1:4B:1B:30:69:F5:0C:6E:25:C8:A2:4A:FC:61:71:1D:59:85:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFLGzBp9QxuJciiSvxhcR1ZhYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cfcac0-69c0-40f3-97ff-acd43456ad92/1/RLFLGzBp9QxuJciiSvxhcR1ZhYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:cc:b9:eb:dd:03:f5:05:0c:9f:56:f4:de:d9:62:b9:da:
21:be:48:b1:cf:1a:d1:dd:33:34:08:62:94:10:6d:56:08:84:
32:cf:41:50:7d:9c:a5:f7:5d:85:88:1a:62:60:af:37:cc:d8:
a6:70:ed:45:a0:28:2f:16:e1:8c:79:6d:a1:7a:1b:40:d6:4d:
ab:ff:3e:88:29:2b:36:42:b8:7b:b6:22:35:68:9b:a6:9a:24:
51:60:89:f4:6a:60:db:5a:3b:7f:f3:2e:96:b9:ab:a2:2f:95:
64:1c:27:27:f3:4c:d0:16:40:ef:20:00:ec:d3:8d:0a:75:72:
46:8b:f1:77:f4:8e:16:d3:2c:0f:9f:09:c2:6c:a0:86:9a:dd:
00:8b:eb:ac:74:71:fc:65:71:ca:29:7f:12:75:8d:34:9f:0c:
09:78:7d:eb:32:cd:1b:1f:ab:59:12:69:1f:eb:85:6d:18:b6:
a7:5f:06:34:ef:89:1e:05:ef:52:fb:6a:39:5e:16:80:ec:0d:
90:4e:7a:6a:d9:4d:8b:1d:6b:ac:d4:a9:04:96:32:40:34:a4:
e3:58:56:70:b2:de:05:89:6e:6c:9a:2f:85:03:5b:5d:25:69:
74:0b:5b:11:32:dc:78:34:2c:67:e8:2a:f0:00:a4:d1:41:b0:
26:3b:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:00 2025 by rpki-client