Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
File: 21LN5wkMV9jpwx1Rh0jfkiueBM4.mft (raw, json)
Hash identifier: GlC97LQYbAqBLv4QwC5Hg9N3+7FPFGKB6YYh6nK8ZGI=
Subject key identifier: 87:18:34:00:8C:A3:30:00:33:DD:62:C6:F7:E8:D7:5F:9E:A0:F7:AC
Authority key identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
Certificate issuer: /CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Certificate serial: 01984E8B460F571CF2A8230C7F3E8FA47BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
Manifest number: 1477
Signing time: Mon 28 Jul 2025 01:00:06 +0000
Manifest this update: Mon 28 Jul 2025 01:00:06 +0000
Manifest next update: Tue 29 Jul 2025 01:00:06 +0000
Files and hashes: 1: 21LN5wkMV9jpwx1Rh0jfkiueBM4.crl (hash: rIQZ1jppofhCcJOuUCklWbY7hTlh4FBcis7qzC+CHn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:46:0f:57:1c:f2:a8:23:0c:7f:3e:8f:a4:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Validity
Not Before: Jul 28 01:00:06 2025 GMT
Not After : Jul 29 01:00:06 2025 GMT
Subject: CN=871834008ca3300033dd62c6f7e8d75f9ea0f7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:25:bd:9d:78:1f:e8:bf:b2:01:83:39:0b:
2a:dd:83:0c:49:72:de:94:3e:51:4a:d3:2c:eb:8d:
40:6a:7e:71:f2:e8:db:f2:07:21:38:f5:78:47:65:
cd:5d:21:19:22:ce:61:b5:23:d7:fa:d2:3a:68:0c:
26:1b:6b:cd:79:ab:34:17:53:8c:af:dc:80:19:5a:
52:f7:53:37:f4:a0:42:eb:99:c4:e5:bc:c8:1c:07:
86:78:35:b3:83:49:f5:d6:2c:45:1b:9a:ca:21:5a:
bd:8a:80:a4:8e:7f:4b:66:b8:58:d6:1a:2a:64:bf:
0a:54:27:37:55:ba:4f:b0:fa:39:9f:37:c9:9e:e0:
3e:52:06:77:af:a2:01:22:ac:29:d0:ef:02:71:0f:
6e:5e:7b:35:42:47:a6:88:41:0c:99:47:3c:de:1e:
7b:12:c7:43:1c:bf:b5:90:bc:20:66:0c:9c:8b:bb:
f2:05:28:64:9b:4c:79:1f:1e:73:5a:af:8a:c0:bf:
29:7e:b9:14:79:b6:b3:a3:ce:29:48:aa:5d:a3:16:
38:84:ea:59:d5:88:a9:91:21:6d:aa:0e:da:f1:91:
f0:1b:95:4b:f3:64:04:6e:f3:95:00:69:23:e4:7f:
5e:49:41:14:52:26:e7:1e:a2:f0:6d:32:ee:c0:59:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:34:00:8C:A3:30:00:33:DD:62:C6:F7:E8:D7:5F:9E:A0:F7:AC
X509v3 Authority Key Identifier:
keyid:DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:a1:82:b2:44:c8:af:67:fa:fa:32:29:5d:f4:61:6d:32:
a2:09:97:10:86:a1:15:cc:2c:e9:35:83:c2:bb:bd:8f:ea:2d:
87:06:2c:11:bc:22:a6:fe:2a:60:f8:ed:1b:01:77:7f:79:47:
e4:80:10:13:9b:db:cb:8c:67:76:a4:86:57:22:7a:61:b2:b1:
d2:97:6c:ea:50:49:eb:9d:20:70:44:9f:28:38:49:af:7a:03:
d4:df:cd:bf:3a:09:fe:65:f2:f3:3e:88:f4:e2:2c:6f:f2:0e:
e0:ad:0a:4a:4a:24:43:7d:6e:90:df:de:65:e9:69:b9:5a:bf:
b8:d9:8e:5b:72:87:a2:44:37:a7:bd:a6:d8:d2:bf:93:23:1a:
48:d4:af:4a:35:0a:82:0b:e1:d4:1b:82:ee:69:8d:20:b9:c3:
c8:05:58:08:f4:74:18:ff:41:6e:fc:8a:a4:32:c8:0c:90:82:
ef:e8:88:28:10:2b:c7:92:18:87:2f:c3:86:d6:84:35:db:59:
8a:10:83:b0:51:5c:ee:31:84:82:26:82:71:d6:2b:7a:d6:95:
9e:8c:36:6f:d8:dd:ab:62:6d:be:68:95:c2:ea:a4:c3:24:56:
15:f5:eb:37:6a:6c:d7:14:43:8e:21:f8:84:8f:4c:6d:9b:66:
53:a5:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:02:57 2025 by rpki-client