Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: b6miUZMHWzqq+7sLR00XWfkwJZNH6a5GeEHM27Sw3t4=
Subject key identifier: 5A:48:EC:EA:C3:2A:6D:05:DD:1C:10:9F:77:C9:E5:1C:AF:9B:3D:67
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 0198933608D5804D4D3653A5E392436D9C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 15B3
Signing time: Sun 10 Aug 2025 09:00:48 +0000
Manifest this update: Sun 10 Aug 2025 09:00:48 +0000
Manifest next update: Mon 11 Aug 2025 09:00:48 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: vBS9pLESAZZ2MekxqOzZxdhg696zn38OR8/mjPLGjHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:08:d5:80:4d:4d:36:53:a5:e3:92:43:6d:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Aug 10 09:00:48 2025 GMT
Not After : Aug 11 09:00:48 2025 GMT
Subject: CN=5a48eceac32a6d05dd1c109f77c9e51caf9b3d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:28:35:d9:78:04:4c:0b:22:2e:b3:84:e5:
43:de:af:c7:8f:8f:34:db:1c:e6:05:05:db:46:be:
71:77:4e:73:47:e5:62:e1:84:cd:95:ec:8f:37:ed:
32:3a:96:48:3c:bd:16:cc:64:b6:ee:c0:6f:84:07:
ff:9b:68:f4:21:5a:77:7c:d5:8a:c4:50:91:9e:7f:
92:9d:47:3b:2f:76:b4:f7:3b:c9:b1:c4:70:9c:9e:
05:3e:87:bc:c2:4b:6b:0a:b1:e8:6f:86:18:9e:52:
62:c7:b0:7e:7a:db:80:6a:ab:34:bd:de:14:b7:57:
05:a4:fe:fb:ad:e8:2f:86:c1:03:ea:d3:78:4f:c8:
38:78:f7:5c:84:fb:f1:17:cb:9c:8c:c6:50:8a:06:
a1:21:d9:cb:c5:d6:d9:21:d4:cf:2a:da:b1:10:ac:
ac:02:e9:29:de:f1:da:06:c9:0e:15:27:a3:af:3c:
e2:90:e6:e0:8b:11:00:58:ee:b0:d9:de:4d:96:d2:
8e:a0:76:11:5d:37:94:83:c8:51:35:f1:e1:74:81:
aa:ca:00:f8:f3:2d:e5:36:82:07:64:35:fe:9f:5b:
9f:62:0a:6b:a7:bd:76:02:b6:d5:69:d0:2a:5b:02:
a9:22:9d:a4:f3:0f:8c:12:16:c3:5e:dc:07:19:35:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:EC:EA:C3:2A:6D:05:DD:1C:10:9F:77:C9:E5:1C:AF:9B:3D:67
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:55:94:d1:47:4a:08:63:61:3a:7d:f1:40:35:33:16:65:12:
cc:6a:08:58:43:ea:cb:fb:d9:68:fd:c7:ec:20:91:ee:4e:41:
ee:d6:21:c5:2e:c3:ea:ec:87:09:ea:c5:e5:56:57:01:0d:d4:
f0:ca:97:4f:d5:a8:35:b6:67:03:05:df:25:40:84:5b:45:05:
b7:52:fb:c1:16:cf:a5:b0:c4:85:18:dc:a3:09:30:3d:7c:a5:
09:1e:28:9f:fc:14:82:99:1a:38:3b:e6:b9:22:b6:82:da:cd:
43:e1:bd:6c:8d:48:e6:aa:a3:8b:50:29:b3:0e:4e:7e:3a:a3:
27:95:c2:7f:ce:2a:d9:ce:ef:1a:8e:59:43:36:ed:ab:47:e8:
6d:86:35:5e:8a:0e:5a:0a:1d:0f:b3:b9:40:74:ca:62:06:4a:
a7:76:fd:26:8e:fd:87:9b:3a:28:cc:cc:9a:7e:61:94:c4:b5:
42:76:55:0a:9c:6f:e4:24:89:0b:7b:b3:55:db:b0:99:4c:8a:
97:d9:10:53:97:fb:0f:70:5c:39:59:50:5c:0c:fb:11:65:50:
50:73:bc:82:31:1e:1a:14:eb:ea:93:a0:be:02:a6:99:ed:8d:
15:45:e1:39:74:77:e7:c3:bc:20:14:2f:35:79:19:44:69:a1:
15:31:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:50 2025 by rpki-client