Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier: N0rcJ0zUni2qlapYBNs3etVDBGfa8ixuc6aNZzLVMok=
Subject key identifier: D1:03:96:3A:22:F5:B4:E9:D8:36:38:41:E7:60:95:7B:41:39:37:35
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial: 01984966E7BC7031D5363A2F13A4E4D8DC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number: 0E5D
Signing time: Sun 27 Jul 2025 01:02:17 +0000
Manifest this update: Sun 27 Jul 2025 01:02:17 +0000
Manifest next update: Mon 28 Jul 2025 01:02:17 +0000
Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: HEUeJ/HsBl5Uw4kdtdJDK6NZPK/YRFJhdctwuY5eTR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e7:bc:70:31:d5:36:3a:2f:13:a4:e4:d8:dc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Validity
Not Before: Jul 27 01:02:17 2025 GMT
Not After : Jul 28 01:02:17 2025 GMT
Subject: CN=d103963a22f5b4e9d8363841e760957b41393735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:24:ef:12:5f:e4:01:bc:59:0a:68:97:58:
e3:54:e4:16:c7:ac:1a:d4:91:4f:05:dd:48:c0:8e:
70:8e:37:ee:9e:42:7a:5f:37:0f:1c:a9:59:d6:db:
f5:13:4c:65:68:37:bd:f7:ad:49:13:2e:10:18:ee:
cc:da:d9:87:26:cc:87:20:3c:cc:3d:de:b7:47:cf:
aa:13:89:bb:e5:e6:bb:0d:41:60:60:d8:c3:02:f2:
80:c2:83:26:a7:32:0c:e1:44:7f:6b:51:9f:75:a2:
00:b1:b7:ec:7c:e9:cd:fc:07:90:a0:cd:3a:5f:a0:
6d:72:3c:4d:aa:ba:3e:92:81:2d:cc:57:1c:5f:b5:
b8:42:1b:34:ca:f8:5c:2d:49:7d:7b:f9:4d:bb:56:
77:09:32:b1:82:ac:35:c2:5b:d6:01:aa:41:18:56:
7a:8c:99:41:ed:15:1c:d0:40:21:02:d1:be:33:98:
86:8b:31:a3:21:9d:54:af:a4:05:80:b7:01:ad:01:
8b:d0:13:25:6f:a8:6d:be:38:d6:78:f8:ff:08:0f:
dd:e2:3a:d9:25:f2:92:73:18:cf:1e:84:f0:f5:83:
9b:9e:a4:ae:46:6a:59:72:a1:ad:46:4d:88:99:9f:
8e:4a:30:49:cd:27:4d:d9:0c:be:82:76:4d:f9:d1:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:96:3A:22:F5:B4:E9:D8:36:38:41:E7:60:95:7B:41:39:37:35
X509v3 Authority Key Identifier:
keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:78:6f:b6:df:b4:1a:b3:32:d2:fe:53:f7:74:0a:f4:28:97:
8c:cc:25:18:81:84:08:0f:c9:bf:04:c5:c6:a4:0e:f8:1c:99:
43:10:c1:b2:63:4d:74:32:59:a7:a2:0c:e6:7b:ae:3a:45:b0:
b1:48:da:c4:10:ff:2e:75:bd:cd:fb:b5:dc:f3:44:d3:7a:d0:
2d:b9:da:84:c7:b7:d1:e7:d0:f0:11:c2:bf:f4:e5:3a:b0:00:
39:fc:32:98:6c:e8:98:ca:b0:7e:f1:2d:3f:d8:9b:c8:36:2a:
b3:9d:ab:69:31:a2:de:be:f5:b0:b2:6b:8e:21:7c:51:2f:53:
c3:9f:19:b3:25:76:02:b4:36:a5:28:8c:ba:f4:8a:e8:61:2d:
4f:a7:ee:99:8f:f1:9d:99:c1:e7:34:b6:b4:1f:79:6b:28:0a:
67:29:2b:00:05:67:7a:e9:61:e3:51:8a:62:7b:00:bb:f0:41:
06:ef:e5:0a:a2:8e:cf:d5:2c:ac:73:7a:52:73:19:ac:a8:ec:
7e:b0:c5:fb:4b:3b:d9:a2:a8:77:c8:51:2c:c6:b2:4d:15:f9:
00:67:eb:eb:b2:8e:93:11:15:93:71:77:ed:ef:be:9d:13:0e:
75:35:83:69:a3:87:8e:58:94:77:e1:1a:5e:f5:e8:77:c2:19:
20:86:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:41 2025 by rpki-client