Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
File: b20hysOH8-N4uiOkynfeyTA7qS0.mft (raw, json)
Hash identifier: GUIKD24/qepRJEKw75huKv/yps+l8cxWvLuwN0zUqMw=
Subject key identifier: 0B:AB:B7:31:32:71:03:94:A1:15:92:39:25:16:79:1A:0B:9F:00:86
Authority key identifier: 6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D
Certificate issuer: /CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
Certificate serial: 01984A0A51ACEADFDBE1D633369D0060F5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:46 +0000
Manifest this update: Sun 27 Jul 2025 04:00:46 +0000
Manifest next update: Mon 28 Jul 2025 04:00:46 +0000
Files and hashes: 1: b20hysOH8-N4uiOkynfeyTA7qS0.crl (hash: oD0DiRMC63+x3Zukru4EcpQfpYYl+CX7nDValbR+CQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:51:ac:ea:df:db:e1:d6:33:36:9d:00:60:f5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
Validity
Not Before: Jul 27 04:00:46 2025 GMT
Not After : Jul 28 04:00:46 2025 GMT
Subject: CN=0babb73132710394a11592392516791a0b9f0086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:af:17:1c:b4:a9:f0:db:96:9d:55:5a:ca:
71:6d:e7:1e:ec:b2:96:e5:60:75:88:79:63:0f:5f:
d8:16:4a:40:9e:c9:8a:6f:db:3d:12:16:9a:5c:5c:
bf:24:ff:8d:fe:f1:0c:9a:7c:0a:56:67:b8:63:a1:
91:dc:2a:72:68:e8:dd:ba:ad:4c:a6:65:76:9e:e8:
18:6d:09:01:2c:c4:4d:5e:06:6e:61:80:e6:32:55:
ef:95:dd:aa:7f:8b:1b:d5:83:61:7c:93:d6:56:ac:
55:b7:d5:20:c7:22:f4:25:e6:89:34:ee:0b:71:f7:
f3:8f:af:32:fd:52:8c:86:7e:eb:fd:79:6b:e2:e2:
ff:38:79:d4:47:18:31:bc:e2:fb:57:c9:c4:00:cd:
46:87:71:e9:2f:80:67:3c:d0:33:76:83:31:0d:e9:
b4:6c:19:12:6e:bd:0c:37:4a:05:5e:9b:40:65:1c:
23:4b:50:a9:71:25:84:bb:30:1c:e2:0c:90:0f:78:
51:29:ab:80:be:0f:36:ff:ba:2b:5a:b9:1e:25:32:
54:fb:c2:06:fa:61:1c:48:c9:58:8a:88:ca:63:41:
f1:5e:02:b7:91:8b:fa:c2:12:63:0b:ce:d8:60:43:
62:90:2c:54:3d:3a:aa:b5:83:78:79:99:32:22:35:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:B7:31:32:71:03:94:A1:15:92:39:25:16:79:1A:0B:9F:00:86
X509v3 Authority Key Identifier:
keyid:6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:65:26:29:f0:c0:14:69:f1:41:21:88:0d:d4:66:41:da:
42:90:d1:d6:e5:d7:9f:6c:61:cc:7b:ca:39:3d:88:15:1d:01:
d5:d5:c9:a4:f6:3b:24:81:5f:49:fc:49:fd:b3:96:18:98:cf:
5b:2e:bb:5e:6d:61:e0:8e:30:e7:dc:b0:5c:0a:c9:9d:36:3b:
8b:46:49:76:b9:24:96:47:10:e9:11:64:5c:af:bf:d4:8f:e6:
c9:e7:9a:0f:e5:6f:e2:ef:b8:11:82:bf:09:68:26:d7:9a:e9:
9a:62:37:55:e6:90:5d:21:1f:13:6e:6d:e0:5c:3d:56:ff:0c:
85:83:87:8c:67:44:eb:03:16:c2:ba:e7:6b:4c:8f:bf:5a:c3:
bc:5a:3b:76:ed:a8:34:30:bf:1c:c6:79:90:57:ab:5b:65:f1:
6c:80:23:87:38:34:9c:ec:48:25:c1:b3:7a:05:5b:f8:f3:c1:
0e:77:34:07:ed:06:17:0e:de:24:23:bd:17:8f:c1:ad:f9:6e:
46:f3:8b:96:03:e5:37:6d:c8:0c:b6:e4:44:c7:fc:dc:4f:53:
09:db:12:3e:f4:12:78:b9:e5:54:19:51:da:a3:40:c2:8d:9e:
8d:ad:d0:99:b7:7d:d7:c5:71:02:36:48:d4:f7:4e:f3:cc:e3:
6c:74:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:23 2025 by rpki-client