Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File: cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier: /hJYUCmtyTdmsgDe9nl5la/9VBVR42bTfGpjZoqtuns=
Subject key identifier: AB:80:14:B7:76:A6:71:C9:B2:E0:F8:A7:47:FD:C5:0D:E8:BF:2B:41
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer: /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial: 01984B8A6EEF69CCC655E0D5C0BEEEFB0120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number: 146A
Signing time: Sun 27 Jul 2025 11:00:20 +0000
Manifest this update: Sun 27 Jul 2025 11:00:20 +0000
Manifest next update: Mon 28 Jul 2025 11:00:20 +0000
Files and hashes: 1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: ACBDZOpBtKFcXEYyjBoxqsaJuhzX1heDVdyAtZEmPmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:6e:ef:69:cc:c6:55:e0:d5:c0:be:ee:fb:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Validity
Not Before: Jul 27 11:00:20 2025 GMT
Not After : Jul 28 11:00:20 2025 GMT
Subject: CN=ab8014b776a671c9b2e0f8a747fdc50de8bf2b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:38:a4:46:63:b0:3f:99:fd:8d:64:2a:ff:
b8:8f:f4:a9:d5:56:8b:7d:17:5b:b7:aa:e6:bd:78:
8b:a5:a2:65:69:97:93:a6:64:52:6e:c0:b2:e5:49:
bf:ea:a5:e7:e0:f5:2f:57:81:52:02:19:24:da:05:
5c:cc:84:a2:36:1c:31:5c:d0:ce:70:aa:f7:c8:5c:
11:a5:5f:f6:1d:fa:26:fc:3d:37:10:1f:78:5f:dc:
f4:b4:87:c6:35:20:14:c5:49:63:94:db:33:d8:d8:
97:80:1f:e8:44:f9:7e:82:1c:98:5e:ce:13:a2:53:
7d:66:e6:ee:fc:8e:5a:a2:c7:ae:67:82:b7:13:ae:
df:74:35:c5:9c:45:29:ad:c7:e8:38:15:e0:3f:89:
b5:34:cd:7c:be:02:fa:b3:8b:08:a4:5e:dd:78:f4:
df:a4:1e:7f:62:ac:3c:5a:95:d2:12:e5:cb:81:d6:
5d:c8:81:25:6a:64:9a:a5:47:77:42:68:0b:7e:d6:
d5:21:08:f0:db:42:c9:b2:38:6c:b9:65:4a:70:49:
7b:25:61:13:15:0b:e6:e7:72:4a:4c:4b:7c:d8:cb:
58:ef:f0:4c:df:62:15:25:2f:1e:06:66:fc:0f:67:
4d:7c:80:db:ce:a0:94:01:d0:a6:ef:ec:28:78:47:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:14:B7:76:A6:71:C9:B2:E0:F8:A7:47:FD:C5:0D:E8:BF:2B:41
X509v3 Authority Key Identifier:
keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:85:35:df:57:36:7b:54:48:dc:9a:51:a1:32:9e:df:7c:
2f:73:35:f6:3f:c8:07:85:07:d4:cf:c2:a7:45:31:f8:ce:c4:
6f:46:4f:07:12:aa:72:5b:4d:e8:85:ac:f8:9c:1e:01:4c:5e:
e0:e9:bc:c4:e1:d4:0c:c9:83:73:9a:ce:3f:2b:da:c0:31:5e:
80:b4:26:78:cd:0b:a8:3e:79:03:f9:77:a8:3c:90:f7:16:7d:
f5:2a:19:91:21:87:1f:75:38:bf:71:a7:ed:ce:27:c7:a1:47:
7a:cd:b8:fc:f8:62:71:1b:f1:14:62:32:98:5b:d3:41:cc:c6:
69:eb:a3:27:de:db:91:23:62:9b:d0:97:2c:d8:df:95:28:35:
60:ed:57:ba:4e:06:dc:54:1a:bf:4f:15:cc:cb:36:6b:99:f4:
fa:39:2c:9b:05:36:80:b9:f9:f5:a8:6c:df:12:3d:f6:aa:00:
8e:38:2f:bc:1a:8b:b8:28:fd:b1:05:bf:7c:af:f1:14:8a:80:
f9:72:70:f0:a7:a7:32:48:e8:08:92:e3:30:a3:2d:1b:f7:dc:
b1:24:a0:f8:cd:5c:49:ec:99:23:48:65:90:eb:8a:e2:b6:a4:
e5:69:82:be:b8:37:13:62:1e:c5:c6:b4:0b:d2:b0:3e:aa:22:
02:3a:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:23:03 2025 by rpki-client