
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: QmE3Deh2Oid0J1lQNozmGDpKmbq6ne5lxSKkxYXirqg=
Subject key identifier: CA:37:7F:81:8F:E3:17:71:59:DF:92:6E:02:9D:7A:27:75:22:40:D1
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 01988B0FC095A37D4C20221354900422F04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0A1A
Signing time: Fri 08 Aug 2025 19:02:02 +0000
Manifest this update: Fri 08 Aug 2025 19:02:02 +0000
Manifest next update: Sat 09 Aug 2025 19:02:02 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: CAeUJveFymm6veKL9l2+PbO0eUYrxAFy6j5L1RwA6o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:c0:95:a3:7d:4c:20:22:13:54:90:04:22:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Aug 8 19:02:02 2025 GMT
Not After : Aug 9 19:02:02 2025 GMT
Subject: CN=ca377f818fe3177159df926e029d7a27752240d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:bc:79:f1:85:17:ae:64:96:f0:59:20:a9:
90:55:d1:a4:76:d2:12:38:a1:7e:9e:4e:55:7a:7c:
e7:7f:99:9f:b7:d6:28:9f:79:0e:7a:35:6e:76:ed:
3b:a7:88:6b:54:be:92:13:c5:bb:79:1d:58:2d:b2:
e2:fb:da:0b:ee:97:50:b7:bd:48:d5:d3:6d:4a:bc:
37:32:3a:c9:dd:ff:db:64:36:99:31:52:22:99:67:
f8:69:54:6d:fb:59:f0:06:47:38:de:3d:c4:6a:dd:
e4:c0:d2:02:d0:54:aa:84:f6:5d:55:1f:16:d8:1d:
e3:dc:40:4e:6d:b4:98:7c:86:e8:15:17:4e:69:d0:
4e:8d:53:ec:0f:5c:76:5c:c9:26:fd:fc:61:6f:7e:
9c:65:21:26:77:a2:ba:d8:6d:6d:17:ef:ae:dd:93:
2d:10:9e:97:94:86:26:3a:2f:ab:ea:f1:81:74:c5:
e8:08:c7:e2:81:61:f0:7c:3e:b0:5d:bc:97:9a:a8:
7c:60:88:39:1f:23:82:c2:78:4c:bd:5c:14:14:62:
ea:8b:85:02:7a:05:33:2f:0f:7c:cb:2d:84:d9:2a:
89:16:f4:b6:99:65:1c:ce:1e:e0:a5:68:93:69:02:
32:2a:8f:dd:8a:8f:ba:47:64:d4:6a:6f:eb:3a:f5:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:7F:81:8F:E3:17:71:59:DF:92:6E:02:9D:7A:27:75:22:40:D1
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:b5:0e:69:8b:61:b3:54:b2:de:b1:fa:cb:7f:3c:8f:e5:
d0:21:84:23:e8:88:44:5e:de:14:a5:5a:06:a9:80:cd:b7:be:
6b:44:84:fa:a1:23:a3:3b:3e:17:8a:f5:b6:2d:cc:f8:af:5e:
19:44:c6:81:2a:41:53:38:af:b8:7c:06:0d:d0:32:f4:68:44:
f7:24:81:9a:9a:68:60:01:a0:87:b9:de:a1:c0:af:70:6a:74:
95:2e:65:ab:4e:a5:62:60:f3:23:d4:28:d8:98:86:a0:23:b2:
61:27:6f:ab:57:30:2c:67:21:e2:f4:62:50:f6:77:ec:24:d7:
b4:fa:5c:77:a2:b6:98:b8:f3:25:f8:82:a8:62:00:e0:45:e8:
24:cf:03:97:80:8a:5c:3c:88:3e:c3:af:1a:ae:9a:bd:ad:22:
ce:96:ee:8b:3b:02:f1:9c:b1:07:ab:4b:3f:1c:e8:e4:93:50:
0d:17:ab:e2:0d:16:9a:4a:46:e3:c2:af:03:6e:46:fb:51:13:
0e:f6:25:50:ff:03:2a:e0:23:29:ad:41:ab:4b:26:83:71:bc:
26:b2:26:42:31:c3:8e:20:6e:80:a5:cc:bc:e9:21:84:04:b3:
f7:fc:ff:98:e0:cb:1a:aa:ad:1d:fa:6d:54:77:a8:29:58:3b:
61:6a:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:44 2025 by rpki-client