
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: HZ0Z9ooBwT2uaEJ4uBvsi41irKhVCdVrPO2+Y0Uiajg=
Subject key identifier: 49:9F:5D:BC:A9:34:AD:89:5F:1B:16:B6:C4:BB:67:9B:32:91:C4:23
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 01987E662A46008FA402C503F5FE7BF284E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 1469
Signing time: Wed 06 Aug 2025 08:01:21 +0000
Manifest this update: Wed 06 Aug 2025 08:01:21 +0000
Manifest next update: Thu 07 Aug 2025 08:01:21 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: 3A0qTaLXg0FeMvEaOv3ZnZR9IaU89oHdYT49R3YQSwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:2a:46:00:8f:a4:02:c5:03:f5:fe:7b:f2:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Aug 6 08:01:21 2025 GMT
Not After : Aug 7 08:01:21 2025 GMT
Subject: CN=499f5dbca934ad895f1b16b6c4bb679b3291c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:17:e5:36:50:0a:9e:c6:e6:da:67:ec:8e:
21:37:80:e8:2d:c0:b5:a8:12:41:2b:2d:f2:4c:72:
20:d7:27:07:77:87:d7:16:d6:af:51:53:90:b1:0c:
62:46:eb:6e:65:e8:0a:c9:e9:fe:35:80:c3:ac:b1:
f2:46:39:bd:ac:86:40:56:06:31:2e:f5:a8:11:23:
c4:15:3c:10:14:56:ad:d2:17:2d:b8:75:a3:6a:3b:
69:bd:8b:15:e0:89:0f:10:7f:8d:cf:b5:84:67:27:
76:05:24:f0:a3:10:2d:3d:55:8e:3c:2c:c8:90:1a:
03:c7:d8:b7:21:df:ed:8d:ee:1c:03:5a:9e:0c:55:
f3:90:b2:2e:94:36:ef:8a:60:d6:1d:92:ff:31:3e:
0b:13:85:b0:66:c5:24:2a:25:e7:c6:db:ad:3b:95:
11:9f:79:3b:1c:7a:df:a1:81:2e:7e:06:3a:41:56:
76:67:52:c9:6f:32:9d:22:4b:88:24:23:ae:32:53:
75:1a:d6:6e:9d:ec:3e:af:87:73:ce:6c:72:78:a8:
99:5e:92:4e:98:b9:05:15:fe:c7:02:1e:99:75:d5:
47:66:79:9a:05:bf:bb:73:1c:1f:54:cd:af:89:6d:
17:1d:0a:60:bc:d5:61:e5:09:ec:d6:5f:c5:ef:c5:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:5D:BC:A9:34:AD:89:5F:1B:16:B6:C4:BB:67:9B:32:91:C4:23
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:e2:a6:c1:8c:dc:6a:42:6d:4c:a9:18:71:2c:8f:09:0e:
15:62:5d:29:1a:53:75:4e:9c:d1:0d:ef:a1:c6:6f:b4:74:3c:
71:8a:10:e9:0a:9c:98:d5:60:b2:54:e0:0e:4e:71:67:be:eb:
45:69:2b:5a:0a:74:74:37:08:c1:08:c3:d7:58:93:e5:82:00:
e8:a9:ef:f2:68:ef:df:40:0b:46:26:75:72:77:d2:d5:ba:6a:
c3:71:da:54:66:f1:ef:64:c1:ae:2d:da:9c:0c:64:c0:1c:91:
19:e4:0e:97:20:77:93:32:d0:c5:72:46:20:45:7e:84:37:af:
9f:d8:31:a6:51:e0:ba:7a:d7:39:ca:22:e6:dd:ef:5b:dd:c7:
8b:cf:24:f5:e2:ed:2d:c9:1f:aa:ba:36:11:24:21:a8:81:69:
65:5c:22:3e:fe:9c:4e:cc:50:2e:c7:8e:54:d6:ff:53:25:df:
0b:e5:5d:e5:b3:96:a1:9c:21:e2:fc:2e:9b:a9:49:a9:92:a8:
8e:6a:49:62:82:d1:75:0e:ef:53:18:06:39:ba:b8:be:9c:5f:
7a:2b:75:1e:10:05:97:6d:df:41:1c:a1:40:b1:d9:c4:5c:2d:
26:93:42:09:aa:d7:d3:a8:3a:be:97:51:99:dc:90:f9:5f:b3:
a9:85:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:01 2025 by rpki-client