Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
File: b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft (raw, json)
Hash identifier: DtEl0dlTZEhXWWR4bULdmBgaVgPLY3P3CoYA1nW7KGA=
Subject key identifier: 59:FC:0B:68:68:9C:08:32:9C:80:65:41:65:EA:04:A2:C8:9A:35:9B
Authority key identifier: 6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
Certificate issuer: /CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Certificate serial: 0198447652F51DB7B02FE55D6D2AB70AACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
Manifest number: 0FF6
Signing time: Sat 26 Jul 2025 02:01:01 +0000
Manifest this update: Sat 26 Jul 2025 02:01:01 +0000
Manifest next update: Sun 27 Jul 2025 02:01:01 +0000
Files and hashes: 1: b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl (hash: PAH/VPRGY06oQoXL64qdWtszGennfNyn8saeSlap560=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:52:f5:1d:b7:b0:2f:e5:5d:6d:2a:b7:0a:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Validity
Not Before: Jul 26 02:01:01 2025 GMT
Not After : Jul 27 02:01:01 2025 GMT
Subject: CN=59fc0b68689c08329c80654165ea04a2c89a359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:1d:32:34:25:ea:26:33:76:08:d8:3b:e1:
4d:0e:6c:ea:98:96:6d:1e:78:3f:88:f7:eb:cf:e8:
60:b4:5e:f5:f6:92:61:90:03:2b:fd:1e:c7:a5:60:
46:ee:a0:5e:d7:1e:f0:13:63:1e:d4:29:d9:8e:6f:
78:68:38:e2:90:cf:f1:90:65:0c:71:c3:25:ff:81:
03:7e:15:30:ca:f6:a9:b3:0c:10:46:45:4c:c9:d6:
7c:a3:5c:72:9f:1c:1f:13:00:df:26:cf:8b:c8:b6:
2a:65:fe:79:5a:e6:88:bd:ef:2a:d4:8d:87:99:e2:
ee:87:89:cb:01:95:c3:01:46:a6:b5:ee:1b:35:f4:
a4:14:c2:24:de:b9:75:b5:f0:20:29:5d:1f:ea:92:
82:e3:cd:7a:9c:89:21:28:2b:ed:6b:c9:c1:88:d8:
0e:75:c4:a6:e8:2b:34:0d:d1:56:8c:3d:23:92:9e:
41:42:0e:54:bc:be:6c:c7:27:dd:d7:69:11:0d:f7:
86:b9:79:cf:0a:5c:f2:54:41:f5:e5:ae:42:df:6d:
6a:12:86:68:b0:0d:96:20:7d:77:47:b9:6f:95:32:
87:79:10:38:d6:01:8a:c7:66:82:e6:e9:7a:60:22:
f5:59:54:02:2a:a4:0c:87:3f:b0:11:32:97:05:93:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:0B:68:68:9C:08:32:9C:80:65:41:65:EA:04:A2:C8:9A:35:9B
X509v3 Authority Key Identifier:
keyid:6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:47:17:a3:5d:a8:92:6a:91:15:8f:e3:a4:c9:30:37:1a:
fc:dc:ef:6f:a1:2f:4d:08:13:3d:4b:70:20:61:a8:7d:bf:2d:
36:3c:c2:b1:48:de:43:4d:3d:71:04:be:4a:b0:41:88:71:8a:
6e:34:c3:fe:be:8d:26:2d:e8:65:c2:54:94:de:d7:aa:f4:91:
ee:79:b3:76:34:4f:a8:f0:e2:d4:e7:11:ac:05:1c:60:45:00:
b0:65:73:cd:d3:97:19:8e:56:ca:9d:5c:f9:2f:2f:bb:e4:a0:
2d:36:d9:4b:bd:4c:71:0a:09:be:47:0d:65:44:be:26:ac:8f:
04:7c:29:f8:8b:b5:7b:a5:df:73:30:86:49:43:eb:e6:68:e9:
75:2d:38:80:01:3c:11:9c:ec:99:c7:cb:6f:7f:60:d9:5c:77:
40:03:fe:f6:33:de:65:0a:b4:f0:c8:c6:94:ea:cc:60:ac:09:
82:36:00:7b:23:04:56:16:a5:b5:0b:ca:48:e2:c4:41:0b:30:
38:c7:9f:10:9a:01:95:50:18:ed:0a:31:32:02:a6:d8:af:7f:
2f:18:a2:88:21:9c:f4:e2:c3:04:7a:4d:ca:a6:92:88:69:b5:
94:a2:db:a9:30:8b:c6:f1:67:ab:34:8f:3a:e5:76:bd:74:62:
40:bc:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:20 2025 by rpki-client