Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: 5ZreBOa5BdHk0Yf+dpM443leo6Ph6AUqjUIRQg9g90Q=
Subject key identifier: 67:D3:59:C8:12:7F:F9:E6:12:E8:CD:1C:A8:4F:DD:D6:B3:AB:CF:2D
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 01988BEAECE5E9F9A756D9A73AEB1F01BD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 101B
Signing time: Fri 08 Aug 2025 23:01:25 +0000
Manifest this update: Fri 08 Aug 2025 23:01:25 +0000
Manifest next update: Sat 09 Aug 2025 23:01:25 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: uub5edUrEWot5TCtfMtmNUR7SmfqXYGjKS50Cj3F+R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ec:e5:e9:f9:a7:56:d9:a7:3a:eb:1f:01:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Aug 8 23:01:25 2025 GMT
Not After : Aug 9 23:01:25 2025 GMT
Subject: CN=67d359c8127ff9e612e8cd1ca84fddd6b3abcf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:98:b0:12:39:e8:b1:ea:32:a7:f0:58:bd:
6f:9d:ec:da:51:80:50:9d:71:8b:63:a8:5d:a5:69:
44:68:0c:9e:0e:42:d7:69:be:4e:64:8f:26:39:c2:
4b:52:d5:7b:47:00:e0:fe:2e:ee:bc:3b:e7:c8:73:
f9:44:bd:77:ea:32:13:0a:19:7a:4b:14:32:43:e1:
ba:e1:7a:df:d7:7f:21:fe:49:68:02:dd:33:c7:3d:
05:97:b9:2a:a9:67:4c:a6:4f:37:d1:c9:b0:38:8f:
1e:2a:9c:1d:a6:04:7b:de:56:88:50:2c:01:0b:42:
aa:b9:e5:b5:98:62:8d:0e:b8:b2:30:f3:80:29:14:
5f:aa:0d:a9:27:88:08:09:39:af:36:46:fd:9a:ea:
f1:dc:32:52:4a:e4:04:b8:d7:e3:3d:29:6d:a4:35:
0e:82:d7:60:5c:01:3d:da:0e:f7:21:79:e6:7a:c3:
46:de:8c:08:a1:96:91:d3:30:aa:3f:3a:3a:97:52:
03:13:7f:b8:27:c4:5a:08:08:ee:ea:36:b3:c2:df:
77:5f:f4:41:da:b7:40:0e:b9:bb:b8:da:4c:c3:c5:
bf:f9:03:44:5b:a2:69:78:76:ad:c1:df:ba:22:50:
e6:e4:1b:91:75:a4:4e:36:46:46:6f:a8:ba:88:8b:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:59:C8:12:7F:F9:E6:12:E8:CD:1C:A8:4F:DD:D6:B3:AB:CF:2D
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:15:f2:79:94:4c:54:4a:ad:5b:22:26:c9:72:f5:70:a7:
45:8d:ab:fc:65:22:a2:2b:38:e9:d4:44:ba:d6:12:7c:b4:84:
d4:38:1a:12:86:02:d1:6b:5a:5c:7b:4c:bd:8c:80:5b:d2:5b:
2d:d8:19:cb:98:c1:ad:10:bd:ff:89:78:8a:25:5f:f5:cf:ec:
5e:8c:16:39:94:a6:77:d7:18:e0:25:fb:29:44:ba:6d:4c:b7:
02:83:5a:15:73:59:c1:a1:83:db:c6:b8:8e:1a:e5:88:c0:35:
c4:86:6a:83:e4:76:4b:f1:50:8d:ee:c0:b7:2f:2d:19:eb:37:
92:53:7a:ce:ef:57:68:51:48:a3:66:f9:59:e2:db:81:e1:b5:
ef:44:ea:40:66:27:c6:39:e4:ba:c1:ac:54:0d:87:e1:fa:8d:
cb:7b:75:79:33:55:43:34:9e:9c:80:90:56:d4:1f:67:4a:8e:
8b:05:5e:53:55:e3:96:ea:fd:9b:c9:d7:13:b5:26:2d:7b:cf:
7d:80:1a:49:df:39:a1:0c:d3:4d:0c:17:b8:be:ed:e1:46:2e:
09:e2:49:5d:ee:b8:41:b0:35:d2:c6:86:d5:66:37:43:64:24:
c0:25:48:72:3d:ba:2c:1b:af:59:12:30:43:67:83:06:4c:a3:
78:0f:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:49 2025 by rpki-client