Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: JwZcBVow2foFD/ZgjB7hHZlltpcwO3aKGmjNpd6YDDs=
Subject key identifier: FB:C2:83:FB:B8:6E:E2:7B:D7:A1:0B:3A:CC:77:49:6F:E3:43:51:9C
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 019849D322C2CD39C7146A3218B5629240DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 03:00:30 +0000
Manifest this update: Sun 27 Jul 2025 03:00:30 +0000
Manifest next update: Mon 28 Jul 2025 03:00:30 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: OJLY2nD68XRpMheoNpHfmvrjM1Y8ngJtWOpau3TyEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:22:c2:cd:39:c7:14:6a:32:18:b5:62:92:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Jul 27 03:00:30 2025 GMT
Not After : Jul 28 03:00:30 2025 GMT
Subject: CN=fbc283fbb86ee27bd7a10b3acc77496fe343519c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:19:b9:2c:0b:cd:58:0c:c1:01:7c:26:7e:
46:ea:55:42:eb:d6:1d:d0:39:32:35:b4:6a:12:a9:
6c:99:7e:97:6b:91:d5:01:44:a5:87:6a:02:dc:59:
01:1c:98:be:22:5f:c6:ee:aa:cf:33:02:22:c1:0d:
2c:1b:d4:73:2d:a5:a7:27:8d:7b:ba:e3:5d:4c:27:
1b:92:d8:88:66:fb:7b:16:c3:83:d5:59:61:a0:3d:
b4:e4:b2:a3:3c:4e:8b:09:2f:b4:41:be:eb:26:26:
39:cb:7e:04:11:fd:15:eb:be:2a:19:83:20:19:35:
ba:85:e4:1a:d3:6c:c9:72:97:32:fb:a1:5b:a9:02:
38:23:4a:eb:b9:ff:63:40:28:03:a6:63:74:3e:d6:
76:65:de:c3:af:08:79:c3:db:fe:20:5d:aa:99:96:
66:c7:97:3d:e6:17:a6:f4:0b:cc:85:bf:8f:3a:34:
cc:20:0b:3e:e7:1a:d4:66:b2:cc:87:13:58:29:4c:
df:5e:95:e6:4b:f4:60:e8:ea:a7:6d:16:bf:15:2a:
84:fe:56:f8:f5:7b:0f:43:fd:0f:ed:51:6a:2d:98:
67:40:33:4f:a0:0c:c8:63:a1:1e:a2:6e:a1:50:c6:
23:8c:6f:43:ac:d6:3b:ad:b5:f8:5c:42:4b:84:1e:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:83:FB:B8:6E:E2:7B:D7:A1:0B:3A:CC:77:49:6F:E3:43:51:9C
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:d3:bc:39:94:06:db:cf:64:1a:11:f3:e3:81:00:ae:c6:6d:
87:cd:b7:f8:ba:9a:20:84:11:07:76:66:0b:f5:3c:09:75:0a:
3e:12:f7:43:6c:87:84:81:72:d5:b6:10:30:05:a4:5c:95:b7:
3b:d9:5d:c2:b1:3b:c4:65:3a:81:1c:4e:a5:c8:45:ea:e5:9d:
d5:26:bd:c7:cc:82:b9:e9:38:22:5d:7a:19:b1:fe:6e:01:77:
60:7e:a6:d9:a0:0a:ac:20:13:21:d1:08:d0:fe:97:82:68:d6:
97:94:2f:43:98:b7:6c:6e:64:d4:5e:d1:3b:89:4e:80:0e:fc:
81:2f:7a:0f:3f:40:48:63:56:9a:a9:25:79:d3:64:56:e6:c5:
e9:72:e6:08:6e:bd:70:f9:8d:22:64:c1:0a:49:b3:3c:9b:c9:
f0:a0:9f:3c:4e:0d:61:bd:b6:1a:18:71:02:08:5f:76:e9:42:
39:69:01:f7:54:ae:02:2e:53:74:f7:4d:ac:4b:07:c2:43:62:
cd:03:31:b4:30:df:20:bb:fb:26:49:da:ac:38:b6:cd:e1:c3:
1c:0b:e6:2a:9d:00:ae:98:c9:d2:a2:b7:1d:64:26:15:7f:9f:
f0:70:60:ce:08:36:7c:7b:49:29:5e:20:b4:1c:7d:a8:1a:5e:
56:f0:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:05 2025 by rpki-client