Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: mcXAOk7Dbso110dN0fo3CYfeBTY69ChRRXdLagCAcUk=
Subject key identifier: 1F:80:0B:71:44:3F:AF:57:41:7B:B0:22:F9:13:9D:1C:9B:23:CC:77
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 01984A77A0E64A637A21D9570A40AA69F6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 02BD
Signing time: Sun 27 Jul 2025 06:00:10 +0000
Manifest this update: Sun 27 Jul 2025 06:00:10 +0000
Manifest next update: Mon 28 Jul 2025 06:00:10 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: iPiEbkrYurkc1n3boKdn5wHDQudt4zj/8+pkJwv8YeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a0:e6:4a:63:7a:21:d9:57:0a:40:aa:69:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Jul 27 06:00:10 2025 GMT
Not After : Jul 28 06:00:10 2025 GMT
Subject: CN=1f800b71443faf57417bb022f9139d1c9b23cc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:0e:04:c7:6d:41:98:85:d6:8c:e1:8b:25:
61:58:04:17:cd:fa:4a:27:1f:57:b2:25:7d:d9:9a:
f4:0c:55:f3:f4:77:33:ad:cb:f6:a3:c2:a3:4b:e8:
0d:fa:f9:98:9a:5c:11:04:f1:0b:6f:92:71:62:02:
96:14:51:84:06:32:af:a2:a4:a0:1c:d0:16:71:ea:
ae:d2:0b:7b:ab:74:d2:0f:c7:16:e1:db:99:d3:91:
54:2d:b8:13:ca:a2:52:f0:f3:5f:e4:dd:b8:d6:5c:
34:08:74:98:ae:27:b7:3e:d3:0d:3f:1a:e7:22:3e:
0e:3b:f1:f4:89:34:76:17:27:c6:fb:32:b3:16:ae:
85:15:4a:0c:1a:a7:cb:34:cc:1f:68:aa:d2:ca:8e:
b0:ec:c4:15:62:c7:8c:dd:58:70:41:bb:a9:40:50:
df:30:5c:52:a6:d0:54:eb:8b:8c:82:09:4e:f7:16:
8c:15:c5:bb:31:aa:f2:81:da:e0:ad:03:03:e7:41:
56:5b:66:63:45:c2:43:20:c5:24:af:51:34:63:37:
23:ff:61:db:20:45:18:a3:5d:27:85:d3:30:50:eb:
16:10:cc:8d:62:19:0b:a4:82:5b:c9:45:61:14:24:
d3:eb:7d:e7:f3:05:3a:24:cf:f4:a1:65:c6:3c:e0:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:0B:71:44:3F:AF:57:41:7B:B0:22:F9:13:9D:1C:9B:23:CC:77
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:00:e3:02:aa:9b:3d:2f:81:5d:9e:b5:c8:55:d9:e4:f8:
37:70:68:39:ec:ef:a8:22:12:39:89:6a:fd:a9:13:b6:85:12:
ce:d4:d9:d5:fc:68:58:0b:f6:aa:64:56:6d:f7:6e:b7:e5:1f:
37:46:ba:9e:d1:e4:4f:59:18:63:db:4d:ca:b2:b8:57:a5:c8:
7d:00:72:f3:90:dc:bd:d4:02:d5:83:4d:b0:04:00:39:9b:74:
06:0a:9e:f6:95:57:ee:33:2f:52:91:a7:00:71:88:cb:86:b4:
40:61:5a:04:be:c0:be:19:1b:0d:8e:9d:77:d3:b7:bf:73:72:
44:a1:9f:fd:4a:3c:e3:12:a4:61:8e:f0:5a:e2:e8:17:7c:9c:
66:23:fe:ec:8e:36:f0:ee:3c:05:0c:a5:0c:b1:f6:38:3b:03:
57:6c:fe:d1:8a:df:71:89:f3:68:86:03:2d:57:88:95:38:4a:
fe:0c:5f:4e:0b:16:6b:5b:8f:38:86:7b:68:3a:1d:43:62:12:
89:e2:ab:ff:11:1f:21:b8:b4:c9:17:30:c6:f8:06:46:97:6d:
a5:db:51:bf:ce:7c:25:03:a0:7d:ba:82:8f:7a:87:d1:cf:e2:
82:ba:f3:c7:ab:79:73:3f:90:c4:c7:49:d9:8c:28:b9:cc:62:
25:90:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:19:11 2025 by rpki-client