Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
File: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft (raw, json)
Hash identifier: VJXQtvy90SNIHD/A4jrTXFIF2PgVSuZbuUTkuyy6kgc=
Subject key identifier: F2:BA:67:36:C8:FE:E4:92:5B:0B:D1:23:6A:76:EB:B0:F8:99:D2:86
Authority key identifier: 6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
Certificate issuer: /CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Certificate serial: 01982822E422776C7BA7D662E3BB8F8C7E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
Manifest number: 12
Signing time: Sun 20 Jul 2025 14:00:31 +0000
Manifest this update: Sun 20 Jul 2025 14:00:31 +0000
Manifest next update: Mon 21 Jul 2025 14:00:31 +0000
Files and hashes: 1: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl (hash: rSZ5P9yfD0n2iq5kTg2SwU5zenfDA940UddjjAzdS6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:22:e4:22:77:6c:7b:a7:d6:62:e3:bb:8f:8c:7e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Validity
Not Before: Jul 20 14:00:31 2025 GMT
Not After : Jul 21 14:00:31 2025 GMT
Subject: CN=f2ba6736c8fee4925b0bd1236a76ebb0f899d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:50:76:8d:b4:6c:75:5e:c2:59:c3:ad:84:
98:3a:d0:1f:be:74:f7:9e:5f:c1:2a:6e:82:04:56:
61:96:ce:b5:23:21:3f:18:0d:33:22:f8:cd:64:3e:
4a:30:11:88:df:5d:79:d0:3a:a0:22:02:c4:3e:c1:
1e:de:98:98:6f:76:d0:5d:73:a7:fe:3d:7d:b0:3b:
8f:f4:41:8e:a4:50:ff:30:a6:5e:88:eb:28:44:64:
29:32:9f:30:84:5c:4f:14:f8:f2:2e:63:07:73:f8:
de:66:2d:ed:51:18:97:48:01:56:be:80:51:dd:b2:
7c:0d:89:54:d7:59:54:f8:90:44:cd:a8:6b:54:34:
cb:bc:08:e5:db:a9:70:68:82:47:4e:3c:af:bc:97:
64:ff:41:ed:91:a0:ef:5d:9d:f8:af:24:4d:9e:b3:
e8:63:df:c3:ce:f7:d7:47:d4:d6:ee:3d:71:e9:59:
f5:9e:7f:1b:e1:3f:94:18:4d:f4:1d:78:88:68:7f:
97:e8:ff:f8:30:ae:06:77:86:66:f7:dd:f0:0c:fc:
b9:6d:34:69:e1:5d:e6:40:ed:c7:ba:a0:65:b4:1f:
5f:b4:d8:e4:2e:1c:7c:9c:d0:6f:27:1d:96:01:55:
2c:8a:05:0a:9a:02:ec:07:eb:46:c2:14:3d:cd:8b:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:67:36:C8:FE:E4:92:5B:0B:D1:23:6A:76:EB:B0:F8:99:D2:86
X509v3 Authority Key Identifier:
keyid:6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:5d:6e:c0:9c:29:2c:e1:d9:ee:de:74:3f:2c:13:2f:da:
7c:82:70:5a:36:f1:53:60:ca:0a:93:cb:78:ab:28:0c:eb:22:
64:55:aa:3e:b1:bc:5d:fc:24:38:bc:da:52:6a:4e:68:0a:12:
d4:aa:d0:2d:80:91:4a:66:f0:c7:cc:ee:a4:8a:b2:ac:7b:b5:
92:db:f5:91:ee:4a:13:1e:a6:b5:37:9a:4e:e2:f4:73:34:6a:
f3:62:ee:ea:f0:21:23:0f:6b:b1:48:84:4f:b7:d0:fa:b8:bb:
5f:5c:d6:bb:c8:ac:3e:14:d5:7a:63:82:7e:ed:81:5f:c3:1c:
6b:5d:a1:12:9f:0c:fb:c5:46:0f:76:eb:8b:5f:81:80:dd:0d:
d6:12:a6:df:b5:82:ad:ef:08:09:cc:60:1c:c7:9e:74:26:9f:
d2:be:d8:41:01:e2:90:f1:81:8e:46:2e:c7:af:4f:cc:26:23:
49:f3:24:23:85:ec:ab:2d:02:f6:53:7c:9e:1c:a5:cd:c5:0e:
7d:a3:fb:e5:c7:06:a4:2c:ea:08:3a:b6:e8:a7:6a:ec:6c:ce:
00:d7:2d:fc:d3:f9:80:fc:9d:6e:1d:71:66:9e:69:dc:f5:8a:
52:ed:b6:ef:7b:2a:75:0e:6f:2a:3c:fc:46:c4:45:ce:47:10:
13:e5:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:31 2025 by rpki-client