Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: e4b2RWhNu+JmwoGrvSN7jvo99AW7neBv3tCyKGGMWhM=
Subject key identifier: 19:B0:74:B3:B3:31:D2:97:4A:6B:3B:0B:2A:C0:99:3D:AB:A6:59:B7
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 019847783D75AAE1FBFA4ABD9FE1E11F9014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0B0C
Signing time: Sat 26 Jul 2025 16:01:58 +0000
Manifest this update: Sat 26 Jul 2025 16:01:58 +0000
Manifest next update: Sun 27 Jul 2025 16:01:58 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: 1l4LIEKC44gRvFAX/IVLZaD2NXop/a7DrLiEX1KgF20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:3d:75:aa:e1:fb:fa:4a:bd:9f:e1:e1:1f:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Jul 26 16:01:58 2025 GMT
Not After : Jul 27 16:01:58 2025 GMT
Subject: CN=19b074b3b331d2974a6b3b0b2ac0993daba659b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:70:df:5f:7d:59:77:cb:39:66:f0:f0:66:
25:d2:9a:41:84:1e:89:67:7f:cd:68:d0:e8:f3:8b:
05:fd:b6:6d:a0:8c:7c:d6:7a:85:dd:87:4d:c6:c6:
6f:09:42:d1:f5:33:7b:d7:97:c4:59:1a:62:a2:1e:
f1:fd:dd:2f:61:25:49:fe:1a:5f:4c:e3:6b:53:26:
a1:ff:dd:18:0a:fd:b5:96:73:1a:61:f9:c3:4f:35:
12:d8:17:ef:84:f7:ea:41:95:85:2f:05:44:4e:b9:
07:41:b4:41:f3:7f:75:14:64:b9:77:83:af:bc:bd:
b1:0a:ea:29:12:4e:46:d5:fe:77:d2:c3:b9:3d:af:
16:ac:97:78:2b:7d:09:42:34:48:5e:99:47:a4:ac:
0e:a0:8c:ef:9f:2a:af:b8:43:0b:0f:fa:dd:89:0d:
c4:25:dd:01:1c:9e:11:ba:d7:ff:87:32:46:91:6f:
70:70:15:3a:53:f4:92:67:ab:1e:cc:55:88:e6:fc:
25:c1:52:6e:46:ac:7e:4c:32:c9:c0:1d:0e:d2:ab:
27:9c:c3:54:df:83:a8:2c:9b:5e:03:0d:21:01:70:
3e:ef:a7:74:b7:05:ef:de:55:dc:69:d4:7d:10:ec:
da:e1:55:8b:27:18:73:4a:1b:99:20:7d:9c:99:80:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B0:74:B3:B3:31:D2:97:4A:6B:3B:0B:2A:C0:99:3D:AB:A6:59:B7
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:9f:b9:1d:c2:c5:e5:68:2b:a9:54:fa:56:3d:78:ed:8a:
ee:44:05:cc:fd:56:62:e5:6c:95:5d:6d:98:09:a7:c3:a1:74:
5b:08:a8:71:c5:f9:60:07:e7:e2:0e:15:bc:5d:1d:25:46:cd:
a6:65:b6:49:c2:17:2d:74:d1:01:e7:3b:e7:b9:c1:1c:10:57:
44:1b:b5:a7:79:2b:02:74:42:c7:a8:d6:9e:07:90:54:78:9e:
90:f1:ab:d3:8f:f8:94:41:35:f0:53:03:49:30:71:e7:82:d1:
39:4f:56:29:bc:ab:13:bc:a6:10:d2:d5:78:0b:99:46:d1:56:
12:eb:30:ee:24:f2:96:3d:85:d4:c7:ce:3e:6a:05:e5:d5:ca:
50:a2:74:a1:df:42:2b:28:d1:b2:03:2c:53:a1:50:65:cc:61:
8d:98:fa:af:88:7e:4c:73:d1:b5:d3:44:1c:00:0e:48:b4:62:
5a:1c:78:b2:78:bb:1f:dd:bd:29:57:a4:8f:c3:e4:87:25:69:
6e:8b:54:f2:2d:49:db:29:7a:bc:51:09:25:94:df:42:a0:24:
02:b7:f5:ee:32:35:02:6b:92:8c:d7:cf:e7:5d:76:96:52:4d:
f2:a7:fc:2a:06:85:56:6e:c7:a3:d1:7e:92:89:b7:02:eb:ff:
d6:a1:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:20 2025 by rpki-client