Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: 52MCxSOkLNUet8OaKBTxkzodxjZpSI6bBzbbX38c/Uo=
Subject key identifier: 9F:9F:C7:6C:9A:EA:78:4B:FA:95:B4:66:2D:C8:90:94:DF:3F:90:5F
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01988EECB1CDD05FD566C81359B7FFF74A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:02:13 +0000
Manifest this update: Sat 09 Aug 2025 13:02:13 +0000
Manifest next update: Sun 10 Aug 2025 13:02:13 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: dQS/z9Rn893VWtQdIpQzALwjgoBTqGDYSbSuk/v5h+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:b1:cd:d0:5f:d5:66:c8:13:59:b7:ff:f7:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Aug 9 13:02:13 2025 GMT
Not After : Aug 10 13:02:13 2025 GMT
Subject: CN=9f9fc76c9aea784bfa95b4662dc89094df3f905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:9e:49:27:b2:d7:52:33:90:e7:6a:3d:98:
ad:e9:5c:d6:22:0d:6e:6d:81:1e:78:af:15:e4:25:
f1:8e:7d:75:d6:67:07:d1:8b:55:e1:05:b2:c7:3b:
3c:35:67:93:37:ba:06:a6:c8:71:47:37:a9:66:3e:
ff:b8:0f:4c:5a:fc:d2:35:cc:ef:e3:1e:09:73:37:
9e:b7:b7:ad:ae:fa:4c:23:bb:a9:82:fc:e0:91:2e:
b4:34:7a:1a:51:e3:30:14:a1:e2:4e:63:44:3c:98:
5f:b6:7d:ad:da:5f:a5:90:98:be:7e:b4:b0:b6:9b:
d0:11:d5:63:19:cb:c4:97:94:93:29:3f:b4:de:a0:
ae:62:d0:99:f3:fa:3a:54:9c:fa:10:55:6b:39:4f:
9a:be:e1:ad:f9:1b:11:4f:ff:e5:49:d1:0d:b9:95:
94:d4:bf:df:30:4f:6a:ea:6e:f6:92:a0:48:49:1b:
d3:1e:a4:de:ee:ad:5e:aa:74:63:f5:8c:fe:c0:c4:
9d:eb:f5:11:21:f2:e7:cc:73:dc:2f:61:d5:e0:8c:
9a:bd:d0:f1:9c:b3:ec:5f:94:88:df:a3:49:7b:16:
20:22:40:96:ea:59:4a:a7:ce:f3:32:58:67:de:0f:
95:b4:d6:4d:b6:9d:4e:7a:3c:59:5d:3e:84:bc:8e:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:C7:6C:9A:EA:78:4B:FA:95:B4:66:2D:C8:90:94:DF:3F:90:5F
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:d8:ce:92:07:72:5c:e4:01:7e:ff:c3:12:60:4b:3f:a1:
a7:8f:42:77:30:cc:77:5d:72:98:72:7f:e9:a4:d9:10:b9:54:
30:b6:cd:85:94:c1:3d:39:f9:6e:16:75:a1:d3:0d:2f:02:a1:
a8:28:6b:bf:f0:46:a4:7d:aa:3c:72:b2:36:35:e3:1d:9e:78:
61:4a:99:16:a0:c5:a8:98:3a:46:f1:ac:29:11:30:b2:92:fd:
fb:a2:1b:6b:44:56:f4:bb:58:c7:de:3d:e4:d0:78:0f:40:9e:
10:83:f4:1e:c2:fe:27:c9:1e:14:c4:ec:d4:49:d3:42:5a:ea:
81:f8:b5:f9:a6:da:ed:95:43:82:a3:65:a2:74:f6:57:ba:96:
39:3a:06:67:69:80:19:9e:93:f7:d7:31:8a:95:c5:1f:4a:c1:
30:50:2c:84:68:5e:ff:b2:25:6c:84:9c:8d:e0:6e:31:83:23:
b3:d8:58:f2:a6:9f:9d:ea:07:e7:38:05:19:38:cf:40:f1:54:
df:4d:98:1c:92:ae:6e:49:8b:ac:3a:75:c3:58:1c:e5:7c:5e:
04:78:0a:02:64:b5:e3:31:0b:33:4a:41:a5:a6:14:24:36:3d:
87:46:ee:a2:39:bc:0b:7c:d6:4a:21:d3:01:32:8b:db:ac:28:
6b:8a:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:07 2025 by rpki-client