Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: 76C1AT5R8K/tKjeZEQCQGDRZPHge9BvbUrJQ5zQkA9k=
Subject key identifier: 20:BB:0F:AB:96:11:27:F8:14:72:47:A4:23:1B:5D:98:D0:48:2D:60
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 019848C044B8076A2BDDA086CAEAD242B89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: 87
Signing time: Sat 26 Jul 2025 22:00:16 +0000
Manifest this update: Sat 26 Jul 2025 22:00:16 +0000
Manifest next update: Sun 27 Jul 2025 22:00:16 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: 514dLrOjxJt4My2477LyMTf1J4uF526St8uX5hPBwvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:44:b8:07:6a:2b:dd:a0:86:ca:ea:d2:42:b8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Jul 26 22:00:16 2025 GMT
Not After : Jul 27 22:00:16 2025 GMT
Subject: CN=20bb0fab961127f8147247a4231b5d98d0482d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:5c:5b:61:3e:bd:1b:e7:08:34:74:ae:4a:
4b:c1:1a:db:f8:83:1a:42:32:a1:c6:89:60:0f:70:
be:81:99:70:a5:5a:6e:ed:99:55:13:1c:5c:6d:3e:
76:e6:85:65:8f:e1:43:77:59:f3:48:22:ac:46:86:
37:f1:ba:00:41:db:7d:f0:b1:3a:ea:57:f1:f9:1e:
57:90:82:f8:2a:6b:69:2c:aa:2a:e2:3f:f7:a4:34:
5c:0a:37:7c:a0:a1:a7:b7:53:6f:0b:6f:b0:ff:6f:
2f:25:22:90:83:88:8e:67:54:31:89:24:4d:20:37:
16:4a:2b:69:50:2e:23:3c:0a:d4:0a:2f:cd:03:0e:
20:69:4d:15:5e:bd:1e:e2:43:2d:25:1a:13:7a:a4:
7b:3e:84:ab:3d:f4:cc:d9:ea:dc:66:2b:26:9e:42:
78:6d:1f:ba:71:4e:4d:7e:d4:9f:69:03:a1:93:62:
d3:50:d3:44:c8:d3:8b:8d:8e:c7:47:ad:89:d3:9b:
32:f7:84:1d:76:4a:04:3b:f9:c7:74:8c:e8:c2:1f:
99:6b:39:e2:28:b5:13:f6:ed:0e:1d:8b:0a:8c:e8:
84:97:06:3f:db:e1:95:ba:4a:ba:0b:15:d5:08:a8:
1e:da:11:d1:72:70:4e:4b:2b:bf:27:42:5a:49:78:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:0F:AB:96:11:27:F8:14:72:47:A4:23:1B:5D:98:D0:48:2D:60
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7e:03:00:ed:82:bd:e8:f0:01:d4:3d:65:15:80:13:29:b5:
4c:4e:61:f6:44:d7:c1:0e:8a:fd:10:25:97:1d:14:84:0a:f5:
43:2c:64:22:c7:fc:78:37:1a:68:c9:04:fe:84:45:4e:8b:fe:
39:1f:63:ad:29:47:96:c7:0c:36:ed:81:f9:06:13:4a:cf:49:
a0:59:4b:10:76:15:4d:d9:78:6c:33:f1:18:c1:f8:b5:6b:26:
f4:7e:6f:c8:4e:29:c8:cf:d1:26:33:5e:0e:f4:45:1f:e5:47:
66:f6:d1:09:a3:b6:26:a2:67:0f:42:82:0c:9f:80:78:65:d9:
8d:7c:eb:17:0b:10:f2:c7:ee:c9:84:3a:1b:4d:d1:39:a6:a3:
fb:cb:d4:f9:d5:d0:61:ff:d0:16:bc:85:ad:11:e6:a6:9a:67:
6b:0f:fb:3c:05:99:0b:da:c8:5e:13:f0:5c:20:a7:18:ae:50:
90:03:0e:7f:49:2c:48:ea:e2:4d:da:88:33:5f:50:df:43:68:
9c:99:db:f3:8c:3f:52:7b:76:b7:8e:c5:fd:f4:e8:44:fe:66:
5d:bd:76:7d:c1:81:1d:eb:ec:25:62:a3:d5:05:4b:ae:52:9e:
58:39:f5:04:69:70:05:d6:73:a9:42:cc:12:83:08:57:dc:a0:
0e:c2:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:42 2025 by rpki-client