Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: ++qK5oWdK+VAtbYb0Lt9HlCoCOH6k4emjsXliuARIc0=
Subject key identifier: 06:81:15:A3:FF:97:EF:65:D3:8A:84:32:C2:4B:9F:C1:CF:92:9F:52
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0198462D858EF58F8640791738C4F6F21AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 1481
Signing time: Sat 26 Jul 2025 10:00:45 +0000
Manifest this update: Sat 26 Jul 2025 10:00:45 +0000
Manifest next update: Sun 27 Jul 2025 10:00:45 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: WDKkFmnDL6y+hsIstzg3XzmRZCd6+N3bvH5Z6X4oX8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:85:8e:f5:8f:86:40:79:17:38:c4:f6:f2:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Jul 26 10:00:45 2025 GMT
Not After : Jul 27 10:00:45 2025 GMT
Subject: CN=068115a3ff97ef65d38a8432c24b9fc1cf929f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:9a:4d:6f:3e:b6:18:ac:64:84:cd:8e:d3:
9b:e0:87:33:7c:93:37:7b:fc:12:25:7e:05:8c:60:
f0:82:30:82:be:43:65:00:43:59:87:f0:9a:c2:70:
63:f7:37:86:bb:3e:12:c7:09:ad:36:e8:40:c8:bd:
0e:bf:0b:eb:99:30:40:7c:2f:53:f5:d3:8c:3a:65:
d9:27:93:63:6a:21:8b:1e:e4:d4:d7:4c:97:cf:81:
e1:39:69:4f:a5:5c:93:80:79:f7:aa:3f:c8:c0:16:
71:69:cf:dd:9a:33:7c:ab:97:a8:90:0c:19:ad:25:
b5:6c:7c:5d:cf:ef:17:f9:ff:50:85:e0:9f:22:df:
a7:03:02:55:1e:02:87:b6:b8:17:87:17:2e:c9:8d:
00:7c:99:7c:bc:7b:e2:56:00:96:ad:94:49:a0:88:
a3:43:b9:b0:f7:ba:5d:eb:00:ca:ec:d3:78:e9:1a:
48:3e:7b:8d:b5:c0:25:1e:65:e7:b8:be:e3:0b:3e:
4f:d6:5d:40:76:5e:13:7f:13:17:55:e4:b9:8f:1b:
ad:31:61:d7:f7:33:f7:ca:4e:e5:d2:9c:fc:04:84:
8e:1d:84:7a:3f:50:69:3f:0a:20:9d:f9:09:9e:61:
48:54:22:9e:21:d7:4e:0e:2b:eb:7a:65:f7:94:f0:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:81:15:A3:FF:97:EF:65:D3:8A:84:32:C2:4B:9F:C1:CF:92:9F:52
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:d7:e5:01:51:ea:23:e9:a8:8d:a8:1f:3e:b9:ce:68:ea:
8e:80:cd:44:b8:c7:cf:fb:03:bb:6f:2f:29:b1:5a:19:c8:1b:
12:0c:dd:ea:b4:9e:cd:db:df:d8:63:ea:f5:83:6a:7d:3a:33:
7c:3b:e7:e9:50:e4:f9:78:34:5d:bb:50:9e:54:1f:a3:af:77:
19:b6:f6:33:bb:f7:aa:64:9f:8e:7f:22:b1:44:16:d8:c7:8b:
32:f1:36:9e:9a:72:fa:c3:6c:0d:60:d6:c8:28:8f:11:fb:65:
2b:75:b4:13:85:e8:1a:06:d0:51:a6:50:ce:18:f4:0a:6a:5e:
95:63:52:5c:bc:c1:1f:55:12:8b:71:22:0e:f8:86:30:cd:f5:
84:84:e9:ec:9c:22:88:58:28:64:80:93:48:3a:5b:b2:a3:f6:
25:86:d1:c8:49:06:4e:54:d6:ed:15:53:7f:65:cb:93:aa:c9:
27:67:e1:48:77:23:a8:df:28:1b:68:3a:95:1c:b4:00:c1:3c:
e1:92:f3:08:22:2e:7d:2a:35:6e:f2:19:a8:6e:c1:53:7c:33:
e4:f4:4e:40:c9:27:3e:e8:27:d1:75:0d:2d:5d:b6:74:6b:d6:
86:5b:bb:cf:ee:72:84:36:f7:5f:3a:ad:72:4e:78:20:7b:d3:
8c:52:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:16 2025 by rpki-client