Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: NaDp+zRHBFP06whC7h4L3by763J0cNqgWtN66yGBF44=
Subject key identifier: B2:E5:8E:2F:D5:36:AD:E7:3B:2F:77:CE:2A:84:1A:BA:C2:FE:75:CB
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 019852689F82E85867E4DB5BB24AD5923A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 075B
Signing time: Mon 28 Jul 2025 19:00:44 +0000
Manifest this update: Mon 28 Jul 2025 19:00:44 +0000
Manifest next update: Tue 29 Jul 2025 19:00:44 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: JuwkR1L6RC7NH9rLQIRj3H73O2D1oTJvWRwyv2Z6Jbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:9f:82:e8:58:67:e4:db:5b:b2:4a:d5:92:3a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Jul 28 19:00:44 2025 GMT
Not After : Jul 29 19:00:44 2025 GMT
Subject: CN=b2e58e2fd536ade73b2f77ce2a841abac2fe75cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:c9:6f:04:a5:f3:9d:91:b4:d3:e3:eb:f7:
13:94:28:73:e0:dc:28:c2:31:eb:20:ff:9d:6c:41:
f3:b4:07:74:1f:f5:0e:ac:50:14:8f:9e:f8:9c:ef:
aa:e9:ad:29:66:a6:00:db:fa:d2:25:ca:27:80:6d:
23:d3:13:22:22:d6:35:4a:61:62:c0:c4:f2:24:3c:
5b:6e:b6:db:ef:e7:75:9c:db:3d:fc:c1:c8:bc:b0:
94:af:b8:f7:53:77:ac:ea:8d:56:1b:06:b0:80:bb:
4e:ca:4a:7a:ec:4f:11:c5:38:a7:4a:15:40:d8:92:
50:64:38:d4:53:1a:aa:2e:ff:74:f4:91:60:8d:ec:
70:2f:e7:78:2c:cf:01:46:1d:5c:f3:7c:c8:f1:26:
a4:c3:a0:df:ea:1a:66:cc:6e:92:8e:08:c7:47:68:
eb:e7:0c:7c:88:d1:b2:6e:a5:11:03:08:c1:b0:57:
45:6a:90:77:f0:3c:82:09:d9:9a:4f:1e:fc:37:40:
07:d7:6c:ef:db:24:7e:b7:e5:9f:87:f2:c8:b2:6a:
d6:af:a1:38:2f:7d:d9:11:c6:50:42:c5:d3:5c:b2:
04:64:8c:69:d4:f5:79:3f:57:e1:a6:4d:c1:52:44:
99:33:9d:76:a5:5b:aa:8b:9e:72:06:85:29:2e:64:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:8E:2F:D5:36:AD:E7:3B:2F:77:CE:2A:84:1A:BA:C2:FE:75:CB
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:8e:c4:d5:00:df:c2:11:1a:31:ca:d5:e7:9d:24:b8:e1:
04:13:6e:83:e5:d9:b3:ea:e9:25:13:38:41:91:ce:37:3a:90:
27:a8:45:dd:f9:fe:45:f9:d8:3c:82:5d:ba:6f:35:ef:75:5c:
0a:61:09:a9:52:36:85:b6:8d:47:55:1e:cf:66:7a:21:f7:3a:
bc:7e:7e:02:3c:ef:2b:6b:4c:18:49:d4:83:4b:1f:25:e8:3e:
33:b0:a7:e2:42:39:88:2d:3c:7d:31:b2:65:3b:58:46:e5:ab:
ee:0e:90:90:5a:cc:0b:dd:9e:f2:9d:cd:47:cd:c1:78:0a:68:
94:bb:96:fc:6d:b6:dc:08:6f:20:e9:93:90:82:2a:a8:31:fe:
b3:e2:0b:5d:15:a4:d5:14:dc:ad:31:ff:1f:cb:a8:99:d8:6b:
08:a5:74:bd:b7:59:92:68:46:98:45:82:f7:24:f6:79:c7:60:
3d:8d:d8:53:4a:b8:01:fb:28:15:a9:b3:26:c6:25:5a:96:3f:
30:5a:33:44:e3:01:f5:d7:5e:ce:6c:80:97:08:a9:25:f5:c6:
e5:79:0a:c9:7e:df:b6:0a:cf:bc:dc:c2:38:9e:1e:96:06:66:
c7:b1:3d:a9:19:84:f9:a2:d5:84:6c:cc:60:b7:10:97:26:9a:
33:2e:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:40 2025 by rpki-client