Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: FnBWUQ194amLIXm/RXWT9IhX1Mpvhj0et+w/u4Ic9/U=
Subject key identifier: CD:4E:93:55:FB:04:6C:AF:DD:7C:CF:C4:72:5A:CF:C9:CA:7A:69:F8
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 019847772C9B6690BA7902C52831329877A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 16:00:49 +0000
Manifest this update: Sat 26 Jul 2025 16:00:49 +0000
Manifest next update: Sun 27 Jul 2025 16:00:49 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: n0dJNTYSKzTjoAz3BTNe79mf1ypnCiFVHF1GQbK+LXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:2c:9b:66:90:ba:79:02:c5:28:31:32:98:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Jul 26 16:00:49 2025 GMT
Not After : Jul 27 16:00:49 2025 GMT
Subject: CN=cd4e9355fb046cafdd7ccfc4725acfc9ca7a69f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:fa:9f:d9:1e:c1:7f:87:de:61:27:82:27:
dc:54:f5:ac:31:c1:77:ca:1e:b6:3d:8b:84:4d:5e:
8c:d7:ef:19:df:5b:ce:0b:ae:f7:ef:09:b2:7c:33:
e6:de:36:d8:85:da:9a:e9:22:a3:28:96:94:4a:35:
e4:e2:9f:28:e9:60:e4:d0:90:ee:94:0a:d9:5c:de:
af:bf:ef:f3:75:15:b8:1d:4d:1b:59:1b:9e:42:8b:
8b:5c:d8:14:9d:24:d6:79:b9:fa:8a:0d:01:82:2b:
f8:d1:a3:5d:a0:c5:d5:d6:9a:cf:36:84:55:01:e1:
19:7b:ba:02:86:70:4f:cc:61:64:76:05:bb:3a:10:
85:7e:75:39:9f:d1:d8:42:73:f2:b9:c1:c8:2d:72:
54:ba:6c:23:85:11:34:95:2e:2a:56:80:34:9d:fc:
1b:e3:5c:22:87:46:fd:1b:a1:af:fd:33:50:2f:54:
58:bf:fc:0e:f6:65:b2:b2:62:e8:14:ea:80:58:b2:
5c:b0:c6:a6:61:22:3a:48:ba:de:27:a5:8f:60:42:
e8:34:3c:f8:72:53:21:1b:a3:49:0f:53:48:a5:2f:
46:2c:b7:e0:62:4c:fd:4c:97:d3:25:94:51:31:63:
0a:29:ec:da:e1:1d:b8:e8:96:c1:a6:82:12:d0:b7:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:93:55:FB:04:6C:AF:DD:7C:CF:C4:72:5A:CF:C9:CA:7A:69:F8
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:97:94:fa:84:bd:76:a4:cc:0c:57:9a:bc:d2:ef:09:da:
7a:56:40:fb:6b:e7:9a:62:9f:78:4f:e4:aa:2e:dc:90:49:61:
f7:b6:bd:58:af:d5:73:a0:64:c3:bf:40:d4:f5:af:e5:80:cb:
9c:78:25:4d:69:3b:6a:cb:12:7d:89:33:65:41:b7:24:21:a4:
d0:c8:5f:e2:f0:04:81:da:37:16:c0:e8:0a:24:38:7c:25:86:
fd:b0:ba:51:f0:6e:c0:a4:81:64:7b:02:07:b3:93:da:4c:ff:
22:21:78:4b:23:a7:83:dd:d5:3f:54:85:d1:e8:6f:14:ca:f5:
99:62:d6:05:16:7b:6a:f5:a4:55:b6:84:42:d5:93:67:39:cf:
2b:69:cf:bf:0f:c6:d0:0b:f0:08:fd:18:b4:e6:36:67:87:53:
ea:37:86:c9:c7:22:6f:8a:de:bd:3a:fb:0a:9f:8c:17:a1:09:
14:cc:43:35:36:df:11:51:56:7a:eb:8b:4b:8d:0a:76:59:48:
0d:d0:f5:22:b7:4b:29:02:9a:5b:e6:7a:21:6e:6a:6e:d4:c3:
0d:5a:a3:2f:0e:9c:1d:cf:68:4a:60:75:7d:f8:97:b9:b6:06:
6f:dc:de:55:7a:cb:65:7c:08:61:a1:f3:1f:88:93:c5:a4:3c:
c2:e8:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:59:49 2025 by rpki-client