Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: Ck7krRj4qMhMrloc6i2zWOFdK12JbYud2XNPCD0yUpk=
Subject key identifier: 27:05:66:AF:1C:42:9C:D0:84:87:EF:72:F7:06:DE:1F:59:E0:FE:B1
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 01984B545A45E178364181D9771865287A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 072C
Signing time: Sun 27 Jul 2025 10:01:16 +0000
Manifest this update: Sun 27 Jul 2025 10:01:16 +0000
Manifest next update: Mon 28 Jul 2025 10:01:16 +0000
Files and hashes: 1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: yBzYKgxwKTZu0Zoy9iZv44jOIPVxB7kjBcS8j9ttfAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:5a:45:e1:78:36:41:81:d9:77:18:65:28:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jul 27 10:01:16 2025 GMT
Not After : Jul 28 10:01:16 2025 GMT
Subject: CN=270566af1c429cd08487ef72f706de1f59e0feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:06:bf:6a:ca:e3:b0:8c:59:50:81:52:03:
d8:59:2c:b0:db:07:fc:8b:4f:21:18:61:5f:c2:f8:
77:29:a0:ec:63:13:8c:6d:01:e3:5e:14:ee:94:48:
12:95:e9:d6:03:5a:cd:03:98:73:65:84:d7:ad:22:
10:67:ed:8f:a0:d8:7c:36:65:50:91:b9:06:a8:a2:
2b:55:2b:84:6b:3b:8f:e5:d2:1f:55:67:0a:2f:87:
4a:40:5b:73:d4:52:5b:b5:cf:cb:25:48:ba:ab:1a:
45:17:32:7b:33:85:5c:f8:41:d9:de:e0:09:74:3b:
6c:18:0d:76:e3:69:a7:6f:72:21:60:a0:4e:10:2a:
6f:31:17:f6:d4:4c:8e:a3:a6:71:59:a9:c6:dc:c7:
5e:6d:e6:65:49:fc:78:c6:85:4f:5d:a4:96:89:5d:
36:ab:b6:1f:31:a5:33:65:73:04:7a:03:03:51:bc:
fa:a7:8c:8e:30:5b:e2:f9:cc:9e:b8:82:d4:ec:6c:
71:27:9c:3d:d6:45:14:18:61:70:45:3a:29:51:69:
85:9c:00:1a:da:b1:88:36:87:d5:ca:03:ce:2a:c5:
5e:7a:b8:4f:58:cb:7e:12:2b:ca:53:9c:96:e4:ed:
13:44:29:b6:0f:a3:7b:35:12:ee:cf:31:39:b3:35:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:66:AF:1C:42:9C:D0:84:87:EF:72:F7:06:DE:1F:59:E0:FE:B1
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:ed:08:a8:2c:f6:2d:5a:5d:85:89:e0:6f:86:01:16:e4:
b3:4f:a7:85:53:64:41:65:5c:c6:97:e4:3b:c3:30:9f:50:47:
17:7a:33:88:f1:c2:e4:5f:68:3a:e8:10:b4:e7:89:6a:e7:d6:
7f:1c:1b:9d:9c:03:35:0a:d3:ff:f1:ac:6c:2e:be:36:44:db:
58:c6:e3:3a:87:04:93:27:b0:3b:c4:1a:04:be:37:12:56:c8:
1c:07:04:ca:06:1b:f9:67:45:8e:01:0c:de:ce:35:ec:a9:4b:
1b:61:89:f9:27:9d:c0:a1:b7:b5:fa:76:cf:46:8f:d1:d3:56:
5b:82:6c:59:e6:7b:24:7c:8b:28:d9:f5:0e:02:70:eb:77:b6:
32:1a:25:0c:73:9a:8f:e3:98:80:c5:2b:a3:bc:36:ba:e5:e6:
81:23:87:5d:90:b4:ee:cf:f8:f9:ce:d2:b5:c9:15:27:40:26:
c2:32:98:cd:4b:5c:6f:8a:54:cb:6a:d2:2c:e0:2e:f2:4b:7a:
7d:55:53:35:27:a7:78:85:a4:0e:f2:e3:51:fb:90:09:89:d6:
97:69:60:9e:6b:2d:38:ff:f5:b3:95:5a:40:0f:e0:31:85:a7:
2c:ef:04:18:31:db:80:25:77:90:a9:bc:c3:d7:1c:61:d7:37:
6e:c5:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:46 2025 by rpki-client