Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
File: R0NPTmaYKfhsbea6PrDo9m2piLY.mft (raw, json)
Hash identifier: rkhttG78lgh189pDiATC/8gt9D0AsHgc+HTLtT7XqUg=
Subject key identifier: 03:81:59:2C:90:2F:F2:11:EA:52:01:68:99:F0:21:BA:6B:9F:C6:F6
Authority key identifier: 47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6
Certificate issuer: /CN=47434f4e669829f86c6de6ba3eb0e8f66da988b6
Certificate serial: 01982A807B918E6C7A3F61FB023B46D86672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0NPTmaYKfhsbea6PrDo9m2piLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
Manifest number: 23
Signing time: Mon 21 Jul 2025 01:01:59 +0000
Manifest this update: Mon 21 Jul 2025 01:01:59 +0000
Manifest next update: Tue 22 Jul 2025 01:01:59 +0000
Files and hashes: 1: R0NPTmaYKfhsbea6PrDo9m2piLY.crl (hash: 1HFA/wcmYeFPtoFOAx/ORMCpAY00ZCWhe3oWK/gBmBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0NPTmaYKfhsbea6PrDo9m2piLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:80:7b:91:8e:6c:7a:3f:61:fb:02:3b:46:d8:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47434f4e669829f86c6de6ba3eb0e8f66da988b6
Validity
Not Before: Jul 21 01:01:59 2025 GMT
Not After : Jul 22 01:01:59 2025 GMT
Subject: CN=0381592c902ff211ea52016899f021ba6b9fc6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:e6:e5:26:5c:db:bb:2b:69:0a:cc:80:1f:
bd:3a:63:ce:52:36:12:bd:67:5f:7f:36:20:4c:6a:
0f:08:db:d9:94:bf:18:16:ae:ec:b9:76:02:48:19:
07:f5:8b:2f:a7:b6:b3:b5:04:cb:c4:c5:fc:fe:35:
b4:30:48:bf:28:8a:33:3d:6a:2f:d3:13:90:cb:e6:
fe:01:de:f8:ca:b0:68:fb:bb:17:7b:d4:90:e5:92:
ab:fa:80:cc:81:3f:f0:f3:81:cb:bf:1b:fb:7b:18:
67:0b:89:16:9c:3e:02:9f:6d:8e:b6:68:b1:30:0c:
2d:b2:d7:17:ea:d2:52:ba:7b:a7:43:03:b8:06:d3:
fb:c1:00:9f:07:43:02:f4:69:42:9c:bd:89:f4:8c:
72:3e:14:83:38:75:63:17:19:38:eb:c0:19:03:a1:
4d:f2:bd:ab:96:3b:2a:f4:0c:86:79:2a:b6:e8:8b:
17:84:7c:a7:07:a3:59:b7:2e:7c:02:2b:2b:4c:ac:
58:48:c7:74:33:87:fc:19:20:3b:c5:b1:6f:7a:0b:
59:ad:da:cd:f9:e5:f8:eb:5e:c1:bf:c0:e3:30:42:
cd:04:3f:2b:cc:c4:2f:5e:01:eb:cc:ea:b4:9c:3b:
e4:2c:be:9a:62:66:6f:f1:60:c6:d4:94:bf:8d:00:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:59:2C:90:2F:F2:11:EA:52:01:68:99:F0:21:BA:6B:9F:C6:F6
X509v3 Authority Key Identifier:
keyid:47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0NPTmaYKfhsbea6PrDo9m2piLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:66:23:d7:36:e9:10:cf:b8:4c:9b:7f:9e:53:c5:18:fc:
36:ee:42:34:0a:59:fc:ab:aa:c1:67:4a:51:07:d4:fa:d7:0c:
e0:67:eb:53:b1:c1:e2:f4:36:cc:39:c6:ab:01:38:43:95:67:
59:cb:85:49:eb:e2:f1:3d:4d:09:94:ea:af:24:92:bf:1a:40:
12:fe:8c:4b:1f:58:a9:fe:42:ac:77:d0:a2:a7:d3:f1:f0:44:
9f:14:13:57:19:c4:da:73:92:c6:fa:f1:7c:47:6c:42:f5:81:
3f:19:61:b4:4e:80:eb:9c:4c:e7:e4:25:3f:32:a8:45:f9:2a:
45:4e:a2:c7:1b:45:02:aa:4c:e0:43:fc:80:0a:71:b4:f7:3d:
f4:f4:9d:bc:7e:0e:26:8d:85:7c:cf:8b:95:4c:e7:10:c3:c6:
6b:91:49:be:90:98:0e:05:47:2d:6e:3a:24:fa:5d:48:89:60:
94:0a:af:40:8c:eb:e0:7d:f3:24:6d:08:67:20:ad:30:f9:5c:
2c:2f:8f:2a:98:ec:bc:98:be:fa:3b:6d:cf:42:c5:ea:be:b5:
29:0b:82:94:c4:35:6a:32:b3:77:c4:2f:bd:d3:50:7d:a8:93:
6c:d2:71:ac:44:30:b4:5d:ec:0e:69:8a:db:16:4f:56:f9:d7:
a8:c6:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:21 2025 by rpki-client