Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: AaKIe/1ToG1eCWuMSxhpxw++3GnK2Eg/8JHa3Eil4so=
Subject key identifier: 8D:5E:0E:E1:AC:26:20:C3:A5:EB:07:DE:55:0A:4C:78:04:93:06:BA
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 01984A4122B18AF769D0165F0C71E3058CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: p3MjZUau7lzqcYmHc6zIHkL3JBfJR1saOLEnM1/Em4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:22:b1:8a:f7:69:d0:16:5f:0c:71:e3:05:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=8d5e0ee1ac2620c3a5eb07de550a4c78049306ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:ab:fb:cb:05:ae:90:6e:38:0b:67:2e:df:
7f:85:d9:84:25:69:e1:39:27:ff:02:3c:4f:44:2f:
17:ea:de:37:0f:bf:80:33:08:18:49:9a:74:81:35:
84:ec:bf:1c:6b:ec:bb:ad:e6:6b:62:f8:eb:bc:3a:
e0:3d:a3:75:61:49:f7:8a:51:69:3f:c5:f6:b0:c9:
a3:aa:65:d3:af:e5:11:78:8e:65:f4:4e:09:98:09:
5b:af:45:cc:e7:dd:21:9f:b9:e7:e6:ba:fe:9c:cd:
95:45:3a:d6:7e:4a:88:5d:d8:be:13:48:59:bb:41:
03:c1:00:de:5f:38:75:1d:8b:30:c4:6d:26:0b:3a:
9a:b7:92:91:ae:c7:cb:c1:c5:82:b5:54:0d:87:ad:
cb:49:30:39:ce:02:6b:95:33:27:7f:db:10:e9:e0:
65:3f:59:20:4b:f2:9a:97:aa:94:21:10:20:6c:a1:
84:0a:87:8f:48:b9:d0:0d:d8:87:88:66:2d:4c:4b:
a4:86:56:70:cf:e7:78:9e:56:57:bf:6b:0c:fa:fc:
ed:9c:69:a1:1c:4d:a9:63:77:5f:32:ca:f8:f6:7e:
0d:49:da:e3:b5:08:79:ca:cd:2c:09:09:ce:60:ea:
fd:aa:14:f3:6a:86:db:32:b8:1f:b0:be:ae:a8:de:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:0E:E1:AC:26:20:C3:A5:EB:07:DE:55:0A:4C:78:04:93:06:BA
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:d2:ab:60:58:9a:db:6d:c4:a2:eb:be:98:0e:d7:77:a4:
aa:35:39:4d:48:17:b4:9a:34:b6:1d:b1:3a:22:77:f1:a7:e3:
4a:2e:07:b1:b8:8d:03:cc:3f:4f:40:fe:69:e8:a1:bb:53:12:
49:f5:15:c6:a7:49:b8:6c:13:d5:bb:e2:b5:69:bf:18:14:b6:
26:7d:36:56:d4:f9:bd:68:5a:92:7d:f6:70:a2:26:aa:bc:22:
37:cd:e4:bf:32:a9:55:d8:b0:e8:d2:76:d4:5b:01:6f:51:4f:
6a:73:9b:cc:04:f7:31:71:1a:96:4d:e8:dc:e5:ef:4d:fa:cc:
61:f3:2f:fe:80:e6:b9:b3:b1:d4:a9:c2:f1:c1:4c:e7:45:7e:
90:d8:a6:46:71:99:ec:25:93:2a:06:9f:8d:17:bd:50:16:15:
51:12:ea:f9:7e:8d:2f:c0:2f:fb:a3:a1:4b:c7:10:e6:39:03:
3a:fc:5e:84:e5:98:19:aa:1b:79:6e:a7:cd:e7:e1:cb:08:93:
50:87:87:3c:e8:cd:1f:d3:a2:8b:c1:6d:ae:11:2c:71:01:15:
fe:d5:53:a9:16:9e:09:e4:7a:46:e3:dc:a4:d9:09:a2:a7:e9:
35:7f:0f:3a:58:aa:b6:05:40:3a:5f:8f:6a:39:dc:8b:8f:39:
cb:41:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:49 2025 by rpki-client