Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
File: bIlKsevTD7N84imjdNPjE52QUY8.mft (raw, json)
Hash identifier: rVA2eRniJnR0HLaynaFHEtvIODuMdeJd6iV77XP76Vo=
Subject key identifier: 74:3E:E5:49:D3:9B:EA:12:EC:99:F4:C9:D6:CE:31:2B:5C:47:ED:1B
Authority key identifier: 6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
Certificate issuer: /CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Certificate serial: 01984A40FE968C0C0DDE514FF5DF67EC3CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
Manifest number: 0641
Signing time: Sun 27 Jul 2025 05:00:30 +0000
Manifest this update: Sun 27 Jul 2025 05:00:30 +0000
Manifest next update: Mon 28 Jul 2025 05:00:30 +0000
Files and hashes: 1: bIlKsevTD7N84imjdNPjE52QUY8.crl (hash: 0jKtUPMR8qDIOe37RpE9LDDChHqeZUhRcXWg5khT854=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fe:96:8c:0c:0d:de:51:4f:f5:df:67:ec:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Validity
Not Before: Jul 27 05:00:30 2025 GMT
Not After : Jul 28 05:00:30 2025 GMT
Subject: CN=743ee549d39bea12ec99f4c9d6ce312b5c47ed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:4c:81:cb:bc:a8:c5:7b:21:54:9c:df:f9:
82:83:4e:10:df:4a:29:8e:fd:89:a2:fd:a3:d2:2d:
66:79:c6:36:e5:2d:db:f1:4a:19:14:5c:49:12:17:
94:16:06:b3:b9:02:aa:dd:b4:f0:96:a5:d4:79:12:
b8:13:fa:23:fe:81:28:ea:fa:2d:15:df:dd:36:98:
4d:32:bb:cc:61:96:7f:6c:49:1a:6e:4a:9e:e3:95:
c6:54:d6:7c:79:9e:3d:1e:38:5c:c4:87:1e:e0:7e:
2f:63:21:d0:35:80:9e:8a:18:40:e3:f0:e8:d7:05:
8a:00:04:78:87:cf:33:3a:6c:17:e7:73:c6:f8:38:
a1:19:13:71:c4:88:1f:a4:76:47:32:05:5c:f7:c1:
52:8b:b0:19:03:c8:e5:67:3c:30:c7:dd:94:09:91:
6a:0c:8d:89:75:ad:f9:3d:c4:6d:8e:64:d7:69:29:
3e:73:5b:b0:5c:eb:69:ad:ac:47:32:f8:f2:bc:b6:
b1:31:8f:9a:2b:04:8d:09:47:bb:e2:5a:6c:ce:88:
76:e7:95:a9:0a:40:ff:9f:e2:91:f7:b0:8e:ff:15:
5d:11:6a:75:68:6b:37:46:7f:c2:aa:59:c7:4d:7e:
29:48:28:cf:1a:7d:5f:05:d5:93:ce:40:92:f9:a1:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:E5:49:D3:9B:EA:12:EC:99:F4:C9:D6:CE:31:2B:5C:47:ED:1B
X509v3 Authority Key Identifier:
keyid:6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b8:cd:b7:9f:b5:1c:3d:7b:45:f9:32:ca:7e:70:a1:19:ea:
a6:83:59:63:46:36:8a:96:6a:f7:6a:ff:92:48:fe:ee:97:b7:
c2:9e:e2:a1:21:62:93:d2:17:7e:d8:64:98:b9:96:8a:23:60:
b1:0a:f6:a5:46:53:ef:1d:36:02:a3:86:fc:10:4f:63:ba:e3:
06:b5:e6:c6:bd:17:f5:a4:a7:7d:b5:29:20:da:d5:e6:71:55:
2b:e9:75:ff:87:86:0f:36:70:fb:49:73:14:9e:86:7c:d8:af:
e9:fd:23:7a:de:ab:c4:25:7f:d8:70:57:1f:d3:c9:06:b1:5c:
b4:9b:c8:b9:4b:39:86:e4:fd:ab:47:d3:d2:3b:6f:a6:aa:7c:
59:fd:ec:45:94:44:7a:bf:06:78:98:cc:63:28:d1:0d:ca:5a:
5f:3f:e4:17:6b:cc:fe:ac:02:a7:02:79:ff:92:1a:b9:73:da:
d5:f3:37:d8:d4:e8:69:67:df:ab:db:03:e1:28:d2:37:14:f8:
00:65:07:66:63:c3:69:fe:14:89:19:96:c3:17:e6:be:de:da:
00:17:c0:18:07:01:c2:58:9e:60:71:69:7a:2e:1d:71:50:1c:
fd:bc:85:26:ba:22:e7:53:7c:05:00:30:1f:bb:2d:e1:97:64:
4b:ed:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:03 2025 by rpki-client