Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: kEgvZU7hOQ7Z093ETbL/unws3RfmxViMqwFnu4usniU=
Subject key identifier: 9D:18:D1:60:8C:25:FE:33:4C:D8:0E:99:01:FF:FF:93:24:F8:99:FA
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01984A09F72239103963517B03FCC91995B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: H/7msHHBejnx7TwqHnn+Hx/KWbWKkLC61KrYFXrC/2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f7:22:39:10:39:63:51:7b:03:fc:c9:19:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=9d18d1608c25fe334cd80e9901ffff9324f899fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:3a:d3:de:62:cd:82:b3:3f:f1:cb:3b:25:
4c:d7:c1:90:f2:98:f7:a1:08:77:2a:dd:4c:6d:f9:
e5:ac:04:fa:cc:38:6b:cb:b2:ff:73:bc:1b:8b:95:
85:c8:71:a7:ee:42:37:0b:83:b3:c0:0c:d7:62:50:
64:0e:97:95:63:7c:3f:ab:0e:b6:de:10:78:7a:56:
cf:4a:64:dd:7b:36:85:f7:ed:57:09:52:2b:5f:ab:
15:e8:a5:91:e9:0e:a6:45:f5:17:5a:1f:ea:6c:5d:
b1:30:ad:b1:77:50:1a:f7:43:4b:60:c7:f8:42:78:
37:2c:ce:ac:c9:2a:53:11:67:aa:3e:aa:07:d2:e4:
82:c9:68:23:52:80:ed:ba:73:f5:52:e9:af:9f:df:
87:9a:a1:eb:33:84:50:6f:39:5c:72:5d:4a:b0:5f:
74:58:ec:1b:7d:de:45:78:90:3d:ca:30:c6:83:12:
3a:aa:b6:b3:83:a6:82:ea:f3:20:0a:d2:be:3a:55:
40:af:d1:bd:cc:a9:99:09:3f:71:04:a1:ed:8f:1a:
c4:d4:ac:c0:84:fd:62:ac:b7:92:4c:45:f0:04:db:
ce:43:11:fc:03:a8:4a:98:8b:97:b3:bb:e8:b0:52:
62:9b:9f:6d:2b:9f:cf:4e:c0:cc:07:c6:bc:5a:5c:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:D1:60:8C:25:FE:33:4C:D8:0E:99:01:FF:FF:93:24:F8:99:FA
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4e:ab:6d:a1:d5:11:ae:e9:c9:f9:68:7a:bd:5c:58:1b:54:
36:87:58:60:8d:57:62:80:6e:ba:4e:2a:ba:ff:14:e6:82:aa:
e4:0a:43:56:8b:e4:3f:4e:ef:34:18:40:95:71:92:06:cd:79:
51:a2:49:02:f9:48:65:52:c0:d5:63:cf:b3:32:62:b1:af:6d:
c7:5a:1e:bf:70:3b:c3:62:b4:e5:c8:fc:db:53:f3:c7:9f:81:
ec:af:28:ee:fa:79:08:86:33:01:11:ce:a0:eb:95:cc:53:80:
12:b6:fb:63:fc:7e:43:d2:3d:48:5c:d7:fc:4e:1f:c1:24:f6:
84:25:45:40:7c:f4:e4:a4:05:b9:23:eb:d4:fc:e7:1b:5e:d7:
c4:f8:5d:75:07:27:72:36:cd:b6:99:28:37:35:ed:66:2a:00:
53:7c:b7:d7:42:78:e3:24:b9:9e:d5:9f:67:75:c7:04:45:3f:
73:75:a1:a5:8c:a8:b7:7b:23:1d:bf:4b:7e:e3:4f:a4:db:54:
75:b9:97:64:e4:28:7a:25:0a:a1:50:c0:7a:76:f8:3e:6d:da:
a1:a9:fa:bc:4a:5a:b6:b2:40:b2:32:8f:76:83:77:44:df:3e:
3c:53:b2:7b:f7:15:ac:a3:b9:ba:23:b5:81:99:d9:17:4a:28:
07:be:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:16 2025 by rpki-client